Our Methodology
See exactly how we take organizations from gap analysis to audit-ready, framework by framework.
Tools & Techniques
External Network Penetration Test
4 phases / 1-2 weeks typical
01 / Engagement Timeline
Phase-by-Phase Breakdown
Click any phase to see activities, deliverables, and responsibilities.
Activities
- Passive reconnaissance using OSINT frameworks and public data sources
- DNS enumeration, subdomain discovery, and certificate transparency log analysis
- Network range identification and perimeter asset mapping via Shodan and Censys
- Technology fingerprinting and service version detection across exposed hosts
Deliverables
- External attack surface inventory with all discovered hosts and services
- OSINT findings report with exposed credentials, data leaks, and metadata
- Network topology map of externally reachable infrastructure
Your Role
- Provide authorized IP ranges and domains in scope
- Confirm rules of engagement and testing windows
- Designate an emergency point of contact during testing
TFS Team
02 / Outcomes That Matter
Engagement Outcomes
Across every framework engagement, our methodology delivers consistent, measurable outcomes.
Fastest Engagement to Audit-Ready
Typical SaaS engagement: 3 to 4 months. Complex multi-framework programs: 6 months or more.
Unresolved Findings on Client First Audits to Date
Client Re-engagement Rate to Date
Frameworks Delivered to Date
* Figures describe Top Floor engagements completed to date, not a projection or a guarantee of your result. Our client base is small enough that a single future engagement can change them. Timelines assume baseline security controls, an engaged client team, and timely access to systems. Individual results vary with organizational maturity and scope. See our Terms of Service for details.
03 / Quality Assurance
Built-in Quality Gates
Every deliverable passes through multiple quality checkpoints before it reaches your team or your auditor.
Peer Review of All Deliverables
Every policy, assessment report, and evidence package is peer-reviewed by a practitioner who did not author it.
Evidence Validation Checklist
A structured checklist validates evidence completeness, accuracy, formatting, and auditor-readiness before submission.
Auditor Pre-submission Review
Before any evidence package reaches the auditor, a final QA pass simulates the auditor's review methodology.