In the work we scope for mid-market teams, these five engagements cover nearly all of it. What each one is, when it fits, and how to sequence them.
File · 1. Web
Manual testing of a web application across OWASP Top 10, authentication, authorization, session handling, and business-logic abuse. Best fit when you have customer-facing apps that handle regulated or sensitive data. See /pentesting/web-application.
File · 2. External
Internet-facing perimeter testing covering OSINT, service exploitation, and post-exploitation. Best fit when you need annual evidence of perimeter posture. See /pentesting/external-network.
File · 3. Internal
Testing from inside the perimeter, simulating a workstation-compromise scenario. Best fit when you want to know what an attacker can do after the first foothold. See /pentesting/internal-network.
File · 4. Cloud
AWS, Azure, or GCP testing covering IAM abuse, misconfigurations, lateral movement, and cross-account paths. Best fit for cloud-native and lift-and-shift environments. See /pentesting/cloud.
File · 5. API
REST or GraphQL testing covering authentication, authorization, BOLA, BFLA, and business-logic abuse. Best fit when your product surface is API-first or your front-end is a thin client over a public API. See /pentesting/api.
File · How to
Most mid-market programs start with web app plus external network, add cloud once cloud spend is material, add internal network once detection maturity warrants the lesson, and add API as the product surface formalizes.
File · FAQ
Q1 What about mobile, wireless, or physical?
Important, but typically scoped after the five above are established. See /pentesting/mobile, /pentesting/wireless, and /red-teaming/physical.
Q2 Can I bundle multiple types into one engagement?
Yes. We frequently scope combined web + API + cloud engagements for SaaS clients.
Q3 Annual or rolling?
Both work. Many mid-market clients shift to rolling quarterly assessments as their release cadence accelerates.
Talk to an Operator
Real operators. Real attack paths. Real business impact. Talk to us about your security goals.