What is wireless penetration testing?
Wireless penetration testing checks whether your Wi-Fi lets someone in the car park onto your network. Incursion combines a configuration review of your wireless controllers and access points with active testing of corporate, guest and specialist networks on site, for UK organisations, delivered by named consultants with UK Cyber Security Council professional titles.
What we test
Encryption and authentication: whether the configuration in use can be broken or bypassed.
Enterprise authentication: certificate validation, credential capture and evil-twin attacks against corporate networks.
Segmentation: whether guest and corporate networks are actually separate, and what a guest can reach.
Rogue and unauthorised access points, and signal leakage beyond your premises.
Client behaviour: whether corporate devices will connect to a network we control.
Configuration review: controller and access point settings, management access, SSID and VLAN design, and whether the build matches your policy.
Why it matters
Wireless extends your network past the walls of the building. A weak guest network, a corporate network that trusts the wrong certificate, or a printer someone plugged in with its own access point can all give an attacker inside access without ever entering the premises.
How we run it
Scoping. Your account manager and an active penetration tester work with you to agree the scope of your test on a scoping call. The quote is fixed to it.
Testing. A named, suitably qualified consultant does the work, and you get a direct line to them before, during and after the engagement. Critical and high-risk issues are verified and reported immediately.
Reporting. Easily digestible summaries sum up the whole engagement and support detailed technical findings, written so your team can replicate and fix them. Delivered within 5 working days.
Free retesting. One day of free retesting for every five days of consultancy, taken within 90 days of report delivery, so you can be sure the fixes worked.
Scoping notes
Wireless testing is done on site and is often combined with an internal infrastructure test or a physical test in the same visit. Tell us the sites, the networks in use and the equipment vendor.
What you get
A named consultant with a UK Cyber Security Council professional title, who scoped the work and delivers it.
A report within 5 working days: executive summary, technical summary, and observation, impact and remediation for every finding.
Immediate notification of critical and high-risk issues, once we have verified them.
Free retesting: one day for every five days of consultancy, within 90 days of the report.
A walkthrough call with the consultant for your team, on request, at no extra cost.
Frequently asked questions
Can wireless testing be done remotely?
No. It needs a tester within range of your access points, so it is an on-site engagement. We often combine it with other on-site work to make the visit worthwhile.
We use enterprise authentication with certificates. Are we safe?
Often not. The most common finding is client devices that do not validate the server certificate, which lets an attacker capture credentials with a lookalike network. That is exactly what we test.
Ready to scope a test?
Book a call. Our sales team will set it up and handle the proposal; an active penetration tester agrees the scope with you. No obligation.