Overview
Wireless testing needs someone within radio range of your site. For US locations we ship a small remote test device to your office, store or clinic, with a local contact to power it on, or we agree on-site arrangements at scoping. Guest network isolation and the PCI DSS requirements for detecting unauthorized wireless access points are covered as standard.
Wireless networks are a physical-world entry point that many security programs overlook. Weak pre-shared keys, misconfigured enterprise authentication, rogue access points and poorly isolated guest networks can all give attackers a foothold without ever touching your internet perimeter.
Our WiFi penetration tests assess the encryption and authentication of your corporate and guest networks, attempt credential capture through evil-twin attacks, search for rogue access points, test client isolation, and — where a foothold is gained — show what internal systems are reachable.
Testing can be delivered on site or using a remote wireless testing kit shipped to your location.
How testing works for US organizations
- Signed scope and written authorization before any testing, including hosting and cloud provider permissions
- Testing windows agreed around your US time zone at scoping, including after-hours windows for production
- Fully remote delivery, with internal and wireless access via VPN or a shipped test device, so no travel costs
- Reports mapped to SOC 2, PCI DSS, HIPAA and customer questionnaires, with a fixed price in USD
What's included
Our approach
- SurveyMap SSIDs, access points and coverage.
- AssessTest encryption and authentication configuration.
- AttackAttempt credential capture and network access.
- PivotAssess reachability of internal systems.
- ReportFindings with configuration fixes.
What you receive
- Wireless network inventory
- Rogue AP findings
- Authentication and encryption findings
- Segmentation test results
- Remediation guidance and retest
Standards & frameworks
- PTES
- NIST SP 800-153
- PCI DSS 11.2 (wireless)
- CIS Controls 12
- PCI DSS 11.4
Frequently asked questions
Does WiFi testing require someone on site?
Not always. We can ship a pre-configured remote testing device for many engagements.
Will testing disconnect our users?
We avoid disruptive techniques unless agreed; any deauthentication testing is done in controlled windows.
Does PCI DSS require wireless testing?
PCI DSS requires processes to detect and identify authorized and unauthorized wireless access points, typically at least quarterly.
Are you a PCI QSA or ASV, FedRAMP 3PAO or CMMC C3PAO?
No. We don't claim any of those statuses on this site. Most penetration tests for SOC 2, HIPAA, PCI DSS Requirement 11.4, the FTC Safeguards Rule and customer due diligence don't require them. If your contract, assessor or program requires a specific accredited provider, tell us at scoping and we'll say plainly whether we can meet it. See US compliance requirements.
Do you quote in US dollars?
Yes. US proposals are fixed-price and quoted in USD, with scope, effort, deliverables and payment terms set out in writing before work starts. See our US pricing guide for published market ranges.