Skip to content

Internal Vulnerability Assessment

A vulnerability scan can return thousands of results. Knowing which ones matter is the hard part. A CoNetrix Internal Vulnerability Assessment finds the weak links inside your network and helps you sort out where to start.

SEC-InternalVulnerability

Full Access, Focused Results

We review your internal network the way an auditor would, with administrative level access. That lets us see far more than an outside scan can. We check how accounts and passwords are set up, which systems are missing patches, which services are running that shouldn’t be, and whether antimalware is working.

Raw scan output isn’t the deliverable. We collect the data independently, analyze it ourselves, and report on what it means for your security controls. The assessment is performed remotely, so there’s little disruption to your staff, and it helps satisfy requirements to routinely reassess your internal network security.

Service Features

An Internal Vulnerability Assessment looks at your security controls from an audit perspective. It’s a strong fit if you want a broad, repeatable check on your internal network or you’re building a regular testing schedule. It can be a stand-alone engagement or part of an IT Audit and Vulnerability Assessment. If you also want to see how far an attacker could get once inside, pair it with an Internal Penetration Test. Options let you add a review of firewalls and routers, virtual server infrastructure, or core operating systems.

Request More Information Back to IT Audit & Testing Services

  • Internal vulnerability scanning using the CoNetrix ToolBox, connected to your network and managed remotely

  • Authenticated scans using administrative level credentials for more reliable, complete data

  • Independent analysis of technical controls using industry standard tools and CoNetrix data processing

  • Active Directory analysis covering accounts, passwords, authentication settings, and administrator access

  • Review of network file access controls, data encryption, and remote access controls

  • Patch status and operating system and application life-cycle review

  • Detection of insecure services, unnecessary ports, and unauthorized or malicious software

  • Review of antimalware status and security event log content