External exposure
We map the services and entry points your agreed systems expose to the internet.
CL / 004CAMPAIGN / 2026
CURRENT CAMPAIGN BLACK-BOX INFRASTRUCTURE PENTEST
What can
attackers see?
We put your internet-facing systems to the test.
Email us01 / THE ASSESSMENTINTERNET → PUBLIC SYSTEMS
Beyond what is exposed, we look for risk that matters.
We assess agreed targets without internal access and within defined boundaries. Findings are evaluated for their potential impact on your systems and business operations.
Meaningful risk
We examine which vulnerabilities could have a material effect on your operations.
Remediation guidance
Each finding comes with a concrete recommendation for addressing it.
INTERNET → PUBLIC SYSTEMS
02 / THE OUTPUTREPORT → DECISION
AT THE END OF THE ASSESSMENT
Documented findings.
You receive an executive summary and a technical report with evidence and remediation recommendations. The output supports both decisions and hands-on fixes.
Executive summary
An overview of the identified risks and their possible consequences.
Technical report
Vulnerability descriptions with supporting evidence and remediation guidance.
Verifiable findings
Each vulnerability includes its name, CVSS score and vector, CWE, observation, proof, risk, recommendation, and references.
Retesting after remediation is available on request.
03 / THE PROCESSDISCUSSION → DELIVERY
We agree the boundaries first. Then we test the system.
- 01
Discussion
We learn which public-facing systems and business risks matter to you.
- 02
Scope and authorization
We document the targets, boundaries, and written authorization.
- 03
Assessment
We test the agreed systems from an external viewpoint, without internal access.
- 04
Results
We deliver the executive summary and technical report and discuss any questions.
PUBLIC TECHNICAL RECORD
Explore Cylantro Labs founder Kamilló Matek's published vulnerability research and verifiable credentials.
04 / CONTACTinfo@cylantrolabs.com
THE NEXT STEP