Wi-Fi Penetration Testing

Wireless networks are easily accessible and often inadequately secured. An attacker does not need access to the building, just radio range: the car park is enough. We uncover vulnerabilities in your Wi-Fi infrastructure before users exploit them.

Request a test Process & Methodology

Wi-Fi
Pentest

Wireless Security

Test object

Wi-Fi infrastructure, guest networks

Perspective

Attackers within radio range

Focus

Encryption & Segmentation

Prerequisite

Access to the site

When to carry out a Wi-Fi test

A new site has been set up or refurbishment work has been completed, and the Wi-Fi coverage has never been checked.
There is a guest network, but no one has verified that it is actually separate.
Employees, guests and production equipment are all connected to the same ad-hoc network.
The preshared key has been the same for years and is widely known throughout the building.
An audit requires evidence that wireless access points are hardened.

What we check

Network detection and coverage analysis – which networks exist, how they are configured and how far the signal reaches, even beyond your property.
Encryption and configuration – outdated methods, weak keys, insecure default settings.
Access control – authentication methods and how they can be circumvented.
Rogue access points – whether a fake access point can be infiltrated and whether clients can connect to it.
Segmentation – what can be accessed from a Wi-Fi client, particularly from the guest network.

What you’ll take away from this

An analysis of all findings with clear recommendations for hardening your network, plus an assessment of where your network physically ends and where it ends in terms of radio coverage. These two boundaries rarely coincide.

“Wi-Fi tests reveal the invisible dangers in the air.”

Other types of Pentests

Discover our specialised Pentest services for other attack surfaces:

Active Directory Penetration Testing – Misconfigurations and escalation paths in the domain environment
Infrastructure Penetration Testing – servers, network segments and external/internal attack surfaces
Web Penetration Testing – web applications, APIs and their authentication logic
Physical Penetration Testing – Access controls and on-site physical security measures