Penetration Testing
Wireless Network Penetration Test
We test authentication and network separation on your corporate and guest wireless networks. We show whether the internal network is accessible from outside the building or from the guest network.
What it is
A wireless penetration test treats the wireless network as an attack surface that extends beyond the building. On the corporate network, the authentication method and certificate validation are examined. The guest network is tested for real separation from the internal network. The test also identifies access points that are not yours or were installed without permission.
Scope
- WPA2 and WPA3 Enterprise configuration and 802.1X authentication
- Client validation of server certificates
- Access from the guest network to the internal network and corporate resources
- Detection of rogue access points
- Areas outside the building where the signal is accessible
The need
When organizations need it
- When your stores or branches process card data and require the wireless access point detection mandated by PCI DSS at least every three months.
- When moving to a new office or upgrading your wireless infrastructure.
- When you open the guest network to visitors, customers, or suppliers.
Method
How we work
-
Scope and locations
We define the buildings, network names (SSIDs), and test accounts in scope.
-
On-site survey
On site, we map access points, signal coverage, and configurations.
-
Testing
We test authentication, certificate validation, and network separation within approved boundaries.
-
Report and retest
We report findings with configuration recommendations and retest after changes.
Outcome
What you have at the end
You know whether your wireless networks provide a path to the internal network and whether rogue access points exist. You have the required configuration changes for authentication and network separation.
Frequently asked questions
Does the test need to be performed on site?
Yes, wireless networks can only be tested from within signal range. If there are multiple sites, we plan the sampling together.
Will our users' connections be affected?
Steps that could disrupt connections are out of scope. If needed, they are performed only with your approval and at agreed times.
We use WPA3. Is a test still necessary?
A strong protocol does not eliminate configuration errors or gaps in separation between the guest and internal networks. The test measures these points.
Penetration Testing
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting