Network & Email Penetration Test Needed
Budget: $250 – $750 CAD
Suspicious activity on our corporate network and mail servers has raised legitimate concern, so I am commissioning a thorough penetration test that targets both environments in one cohesive engagement. The assignment spans perimeter and internal network layers as well as our cloud-hosted email stack (user accounts, mail gateways, SPF/DMARC, phishing resilience and related configurations).
Methodology
I am open to whichever blend of black-, grey- or white-box techniques you feel will surface the most critical weaknesses; the key requirement is a realistic, attacker-style approach that remains fully documented and legally authorised. No external compliance framework is imposed, but basing the exercise on OWASP, PTES or similar best practice is welcome.
What I need from you
• Reconnaissance, vulnerability enumeration and active exploitation attempts across network and email assets
• Clear proof-of-concept evidence for every confirmed finding
• A concise executive summary plus a deep-dive technical report that includes CVSS scoring and step-by-step remediation guidance
• A follow-up call to walk me (and possibly senior staff) through the results and quick-win fixes
Logistics & tooling
Testing must be performed under NDA and within agreed maintenance windows to avoid business disruption. Familiarity with staples like Nmap, Nessus, Metasploit, Burp Suite, Wireshark and email-focused toolsets is assumed; feel free to mention any additional specialised utilities you rely on.
When responding, outline your relevant experience handling combined network/email assessments, a rough timeline, and any prerequisites you need from my side so we can schedule promptly.
Methodology
I am open to whichever blend of black-, grey- or white-box techniques you feel will surface the most critical weaknesses; the key requirement is a realistic, attacker-style approach that remains fully documented and legally authorised. No external compliance framework is imposed, but basing the exercise on OWASP, PTES or similar best practice is welcome.
What I need from you
• Reconnaissance, vulnerability enumeration and active exploitation attempts across network and email assets
• Clear proof-of-concept evidence for every confirmed finding
• A concise executive summary plus a deep-dive technical report that includes CVSS scoring and step-by-step remediation guidance
• A follow-up call to walk me (and possibly senior staff) through the results and quick-win fixes
Logistics & tooling
Testing must be performed under NDA and within agreed maintenance windows to avoid business disruption. Familiarity with staples like Nmap, Nessus, Metasploit, Burp Suite, Wireshark and email-focused toolsets is assumed; feel free to mention any additional specialised utilities you rely on.
When responding, outline your relevant experience handling combined network/email assessments, a rough timeline, and any prerequisites you need from my side so we can schedule promptly.