Internal Testing Overview

Internal Penetration Testing exploits vulnerabilities to determine what information is exposed within an organisation. It assesses the security posture of an organisation against internal threat actors such as disgruntled employees, third party suppliers, or threat actors who have gained internal access via external vulnerabilities. Internal Testing also identifies and tests potential vulnerabilities accessible only by direct network connectivity.​

Internal Testing imitates the actions of an attacker, who might have the equivalent of internal access, aiming to exploit weaknesses in network security by performing unauthorised data disclosures, alteration or destruction of confidential information, and other malicious acts.​
This test inspects for any weaknesses that could be used to disrupt the confidentiality, availability or integrity of the network, effectively allowing the organisation to address each weakness with confidence. ​

Network sprawl is where the capabilities and systems running on the network slowly grow over time, this can inadvertently leave some legacy elements of the internal network open to exploitation. CTRL strives to discover and highlight these issues also.​