Network Perimeter Security Scan

A network perimeter scan examines all your internet-facing infrastructure from the outside - exactly as an attacker would see it. We scan every port on your external IP addresses, identify running services, check for known vulnerabilities, test SSL/TLS configurations, assess firewall rules, and look for exposed management interfaces. The goal is to find and fix weaknesses before automated botnets or targeted attackers exploit them.

Our Network Perimeter Scan is $400 AUD, covering up to 10 external IP addresses. This includes full TCP and UDP port scanning, service enumeration, SSL/TLS assessment, firewall rule testing, DNS security checks, and a detailed technical report. Additional IP ranges can be added for $50 per 10 IPs. The network scan is also included in our Full Business Security Assessment at $1,200.

Yes, likely. Port scanning generates network traffic that intrusion detection systems (IDS) and security information and event management (SIEM) platforms are designed to detect. We recommend notifying your IT team and any managed security service provider (MSSP) before testing begins. We provide a list of our scanning IP addresses so they can be whitelisted in monitoring systems if desired, though some clients prefer to test whether their monitoring actually detects the activity.

A network scan examines your infrastructure - servers, firewalls, VPN endpoints, mail servers, and any other service exposed to the internet at the network level. A website audit examines your web application - forms, authentication, business logic, and application-layer vulnerabilities. They are complementary: a website could be perfectly coded but hosted on a server with an exposed database port, or a locked-down network could host a website with SQL injection. We recommend both for comprehensive coverage.

Yes. Cloud infrastructure has external-facing endpoints just like on-premises servers - load balancers, API gateways, storage buckets, and compute instances all have public IP addresses or DNS entries that we scan. For a deeper cloud-specific assessment, we also offer cloud configuration review that checks for misconfigured S3 buckets, overly permissive security groups, and IAM policy weaknesses - available as an add-on.

We recommend a full network scan at least twice per year, plus after any infrastructure changes - new servers, firewall rule updates, cloud migrations, or office moves. Automated botnet scanning of the entire internet happens continuously, so any new service exposed between scans is at immediate risk. Our quarterly monitoring package ($200/quarter) includes automated perimeter scans to catch changes between full assessments.

Critical findings - such as exposed databases with default credentials, unpatched services with known remote code execution exploits, or open management interfaces - are reported to your nominated contact within 2 hours of confirmed discovery. We provide enough detail for immediate mitigation (typically blocking the port at the firewall) while the full assessment continues. This rapid notification is included in all our packages.

Our standard $400 Network Perimeter Scan covers external-facing infrastructure only - what an internet-based attacker can see and reach. Internal network penetration testing, where we simulate a threat actor who has already gained a foothold inside your network, is available as a separate engagement. Internal testing is particularly valuable for organisations concerned about insider threats or lateral movement after initial compromise.

We use a combination of commercial and open-source tools augmented by our proprietary AI scanning engine. This includes Nmap for port discovery, Nuclei for vulnerability validation, our custom service fingerprinting engine, and specialised tools for SSL/TLS analysis, DNS assessment, and VPN testing. The AI layer coordinates these tools, prioritises testing based on discovered services, and reduces false positives through cross-validation.

Yes. IPv6 scanning is included in our standard assessment. Many organisations unknowingly expose services on IPv6 addresses that are blocked on IPv4 - creating a hidden attack surface. We scan both address families for all in-scope targets and flag any inconsistencies between IPv4 and IPv6 firewall rules, which is a common source of accidental exposure.

You receive a network topology diagram showing all discovered services, a vulnerability list with CVSS scores and exploitation evidence, an SSL/TLS grade for each encrypted service, a firewall assessment with recommended rule changes, a DNS security summary, and an executive summary with risk-prioritised remediation steps. Each finding includes specific instructions - which port to close, which software to update, which configuration to change.

Our scanning is designed to be non-disruptive. We use rate-limited, throttled scanning that generates less traffic than a typical web crawler. We never perform denial-of-service testing, amplification attacks, or brute-force authentication attempts that could cause lockouts. For mission-critical systems, we can schedule scanning during maintenance windows and further reduce scan intensity. In thousands of scans, we have never caused a client outage.