Overview
Most US organizations have moved voice to SIP trunks, UCaaS platforms or Teams Phone, and contact centers often take card payments and health information over those lines. We test for toll fraud, eavesdropping, caller ID abuse and service disruption, so your phone system doesn't become an unmonitored way into the network.
Voice over IP (VoIP) systems — IP PBXs, SIP trunks, contact-center platforms and unified communications — are often deployed and forgotten. Attackers target them for toll fraud, eavesdropping, caller-ID spoofing and as a route into the data network.
Our VoIP penetration tests assess SIP servers, PBX management interfaces, phones and softphones, voice VLAN segmentation, encryption of signalling and media, and the controls that prevent unauthorized international calling.
We test safely to avoid disrupting live call services, coordinating windows with your telecom team.
How testing works for US organizations
- Signed scope and written authorization before any testing, including hosting and cloud provider permissions
- Testing windows agreed around your US time zone at scoping, including after-hours windows for production
- Fully remote delivery, with internal and wireless access via VPN or a shipped test device, so no travel costs
- Reports mapped to SOC 2, PCI DSS, HIPAA and customer questionnaires, with a fixed price in USD
What's included
Our approach
- DiscoverMap voice infrastructure and endpoints.
- AssessReview configuration and exposure.
- AttackTest fraud, interception and access scenarios safely.
- SegmentationValidate separation of voice and data.
- ReportFindings with prioritized fixes.
What you receive
- VoIP asset inventory
- Toll fraud exposure findings
- Encryption and interception findings
- Segmentation results
- Remediation guidance and retest
Standards & frameworks
- PTES
- NIST SP 800-58
- MITRE ATT&CK
- CIS Controls
- PCI DSS 11.4
Frequently asked questions
What is VoIP penetration testing?
A security assessment of voice-over-IP systems, including call servers, PBXs, SIP trunks, phones and the networks they use.
Will testing interrupt our phone service?
We test in agreed windows and avoid denial-of-service techniques to protect live call services.
Do you test cloud phone systems?
Yes, within the provider's testing policy and your configuration scope.
Are you a PCI QSA or ASV, FedRAMP 3PAO or CMMC C3PAO?
No. We don't claim any of those statuses on this site. Most penetration tests for SOC 2, HIPAA, PCI DSS Requirement 11.4, the FTC Safeguards Rule and customer due diligence don't require them. If your contract, assessor or program requires a specific accredited provider, tell us at scoping and we'll say plainly whether we can meet it. See US compliance requirements.
Do you quote in US dollars?
Yes. US proposals are fixed-price and quoted in USD, with scope, effort, deliverables and payment terms set out in writing before work starts. See our US pricing guide for published market ranges.