Attack Surface and Attack Path Analysis
Trust Boundary Validation
We technically test access between networks, environments and organizations you assume are separate. We show the difference between assumption and reality with evidence.
What it is
A trust boundary separates two environments with different trust levels. This boundary exists between production and test, headquarters and subsidiary, or organization and supplier. It can be crossed not only via firewalls but also through identity trusts and shared management tools. Validation tests whether the boundary is truly enforced in both directions.
Scope
- Testing access between production, test and management networks in both directions
- Reviewing Active Directory forest and domain trusts
- Testing VPN and remote access rules for subsidiary, dealer and supplier connections
- Role and access relationships between cloud accounts and tenants
- Reviewing management and backup systems that access both sides of a boundary
The need
When organizations need it
- When the networks and identity directories of two companies are connected after an acquisition.
- When suppliers or subsidiaries are granted permanent remote access.
- When an auditor or management requests proof that critical systems are on a separate network.
Method
How we work
-
Boundary list
We document with you which environments must be separate and which crossings are allowed.
-
Rule review
We compare firewall rules, VPN definitions and identity trusts with this list.
-
Technical test
From each environment, we test unauthorized access in a controlled manner. Results are recorded with evidence.
-
Fix and retest
We recommend fixes for crossed boundaries and repeat the same test after changes.
Outcome
What you have at the end
You have evidence of which boundaries hold and which can be crossed, and how. A separation table with test date and result for each boundary is provided.
Frequently asked questions
How is this different from a network segmentation test?
A segmentation test checks separation at the network layer. Trust boundary validation adds identity trusts, cloud roles and shared management tools.
Will the tests affect production?
The tests are limited to connection attempts and do not modify data. Timing and scope are submitted for your approval in advance.
Attack Surface and Attack Path Analysis
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting