Assess your internal network from an attacker’s, assumed-breached perspective with expert-led internal infrastructure penetration testing. Blacklock identifies vulnerabilities, misconfigurations, segmentation weaknesses and privilege escalation paths that could lead to compromise of critical systems or domain administrator access.
We work with you to define the internal network scope,testing locations, VLANs, subnets, server zones, domain environment, testingwindows and business-critical systems.
No user or domain credentials are required unless agreedduring scoping. Testing can be performed from an internal LAN segment, acontrolled test host or an agreed access method. The objective is to understandwhat an unauthenticated internal user or attacker with network access coulddiscover, exploit and escalate.
Our consultants map VPCs, VNets, subnets, gateways,interconnections, exposed services, trust boundaries, workloads, resourceinventory and security policies. This helps identify high-value assets, riskyrelationships and potential paths attackers could use to move through the cloudenvironment.
Blacklock performs automated cloud security checksacross AWS, Azure and GCP services using a combination of licensed, open-sourceand custom tools.
For AWS, this may include tools such as Prowler,ScoutSuite, AWS Security Hub and custom audit scripts. Checks are aligned withCIS AWS Foundations, AWS Well-Architected Framework and AWS best practices.
For Azure, checks focus on identity, governance,networking, compute, storage, databases, key management, Defender posture,policy assignments and monitoring configuration.
For GCP, checks focus on organisation policy, IAMpermissions, service accounts, VPC firewall rules, public storage exposure,encryption, key management, logging, monitoring, Security Command Centerfindings and workload configuration.
Blacklock consultants manually validate and exploitidentified vulnerabilities in a controlled way. Testing may includeexploitation of known vulnerabilities, weak credentials, insecure services,local privilege escalation, password hash abuse, misconfiguration exploitationand lateral movement.
Where safe and agreed, Blacklock attempts to chainvulnerabilities and attack paths to demonstrate potential impact, includingescalation from network access to local system privileges, sensitive serveraccess or domain-level compromise.
Blacklock delivers clear, actionable reports forexecutive, technical and developer audiences. Reports include an executivesummary, vulnerability details, proof of concept, evidence, risk rating, impactand remediation recommendations.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Enean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Enean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Enean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Enean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Enean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Enean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Secure your internal network with expert-ledpenetration testing across subnets, VLANs, services, misconfigurations,privilege escalation paths and domain compromise risks.
Blacklock escanea su infraestructura o aplicación web y activa múltiples herramientas de seguridad contra el objetivo. Las vulnerabilidades conocidas se evalúan y se notifican. Los escaneos se pueden realizar de forma continua y repetitiva para identificar cualquier vulnerabilidad nueva o cumplir con sus obligaciones de cumplimiento, o como medida proactiva de ciberdefensa.
No, el análisis de vulnerabilidades no es lo mismo que las pruebas de penetración. Las vulnerabilidades identificadas no son verificadas por humanos mediante un análisis de vulnerabilidades, aunque puede solicitar una validación manual de las vulnerabilidades a petición a través de la plataforma.
Sí. Tienes acceso a todas las integraciones, añades usuarios ilimitados y accedes a tu historial de escaneos e informes históricos. Esto es ideal para cumplir con los requisitos de cumplimiento y demostrar un análisis continuo y continuo de las vulnerabilidades de seguridad.
Absolutamente. La plataforma le permite realizar análisis de vulnerabilidades antes y después de completar la prueba de penetración. Las pruebas de penetración son más que una actividad puntual.
El precio se basa en la cantidad de aplicaciones web, las direcciones IP activas y los repositorios de código que desee escanear. Para empezar, solo tienes que suscribirte a nuestra prueba gratuita de 14 días o ponerte en contacto con nosotros para solicitar un presupuesto.
Testing is performed in a controlled manner with agreedscope and testing windows. Potentially disruptive actions are discussed beforeexecution, and testing can be adjusted to meet operational requirements.
Blacklock typically requires network access from anagreed internal LAN segment, test host or controlled access method. Additionalinformation such as IP ranges, VLANs, server zones and critical asset lists maybe requested during scoping.
Blacklock uses a private internal agent to remotelyconnect to the local network.
The duration depends on the number of subnets, VLANs,systems, services and domain complexity. A standard internal assessmenttypically takes several days to two weeks, while larger environments mayrequire additional time.