An External Infrastructure Penetration Test is performed across the internet and is designed to identify what services you may be is exposing and whether these services contain any known vulnerabilities. Quite often, a simple misconfiguration can lead to an unwanted service being exposed on the internet. Unfortunately, this can lead to active exploitation by malicious automated scanners and exploit tools. The External Infrastructure Penetration Test is designed to identify unnecessary services and vulnerabilities to protect against automated and manual attacks by malicious threat actors.