Overview
Wireless testing needs someone within range of your access points, so for UK sites we agree at scoping how that will work: a tester on site where travel is practical, or a small device your team plugs in following our instructions. Either way we check encryption, authentication, guest separation and whether a nearby attacker could reach the corporate network.
Wireless is the one part of your network an attacker can reach without a cable or a phished click. Signal leaks into car parks, neighbouring units and the street, which makes the strength of your authentication and encryption the only thing standing between an outsider and an internal foothold. A wireless assessment is carried out on site, where that real signal footprint and the devices connecting to it can actually be observed.
We assess the networks you run and the ways they can be abused. For enterprise authentication we test how clients validate the network they join and whether their credentials can be captured or relayed; for pre-shared networks we test the strength of the key and the handshake. We look for rogue and evil-twin exposure, where a client can be lured onto an attacker-controlled network, and we check whether guest, corporate and operational wireless are truly separated or quietly share a path.
The result ties wireless weaknesses to business impact. A weak key or a client that trusts any network is only serious if it leads somewhere, so we show whether wireless access reaches the internal LAN and what it exposes once there. Findings are scored with CVSS v4.0 and paired with practical fixes, stronger authentication, client configuration, proper isolation, that an on-site network team can apply.
How we work with UK clients
- Testing windows set in UK time at scoping. India runs 4.5 hours ahead during British Summer Time and 5.5 hours ahead in winter, so our days overlap.
- Fixed proposals in GBP, excluding VAT; the reverse charge usually applies to UK business buyers.
- No traffic leaves our hands until written authorisation is signed by someone entitled to give it, as the Computer Misuse Act 1990 requires.
- Findings labelled for the evidence you file: ISO 27001 Annex A, UK GDPR Article 32, PCI DSS or a supplier questionnaire.
What's included
Our approach
- Site planningWe agree locations, networks and timing for an on-site assessment.
- SurveyWe map the wireless footprint, the networks present and the devices connecting.
- Authentication testingWe test encryption, authentication and client validation for each network.
- Rogue & isolationWe assess evil-twin exposure and whether network separation holds.
- Report & debriefFindings are tied to LAN impact, scored and explained to your network team.
What you receive
- Inventory of wireless networks and their exposure
- Encryption and authentication findings with CVSS v4.0 scores
- Rogue and evil-twin exposure assessment
- Isolation and segmentation test results
- Free retest of fixed issues and an attestation letter
Standards & frameworks
- PTES
- NIST SP 800-115
- OWASP WSTG
- MITRE ATT&CK
- CIS Benchmarks
- CVSS v4.0
- UK GDPR Art. 32
- Cyber Essentials controls
Frequently asked questions
Does wireless testing have to be on site?
Yes. Wireless is a physical, signal-based medium, so meaningful testing of your encryption, rogue exposure and real coverage requires a tester present at your location. We agree the sites and timing in advance and work around your operations.
Will you knock users off the network?
We avoid disruption wherever possible and schedule any technique that could affect connectivity with your team. Some targeted tests briefly involve specific devices we agree in advance, never a blanket disruption of your users during business hours.
What do you need from us to start?
Access to the sites in scope, a list of the wireless networks you operate, and a technical contact who knows the environment. Letting us know about any critical operational wireless beforehand means we can treat it with extra care.
What permission do you need before testing our network?
Signed written authorisation from someone entitled to give it, which keeps the work on the right side of the Computer Misuse Act 1990. If a hosting company, landlord or managed IT provider runs part of the estate, we ask you to confirm their permission too.
Is this the same as a Cyber Essentials Plus audit?
No. Cyber Essentials Plus has a Certification Body check, hands-on, that the scheme's five controls are in place. An infrastructure pentest goes further, chaining weaknesses to show real attack paths. Many teams use our findings to tidy up before their Certification Body visits.