Skip to content
VENSORASECURITY
External Vulnerability Assessment

See what attackers can see from the internet.

Assess your organisation’s authorised internet-facing infrastructure for known vulnerabilities, exposed services, outdated technologies and security misconfigurations.

Request an External AssessmentView Methodology
Indicative investment
From $990 + GST

Final pricing is confirmed after a short scope review.

Service overview

Independent visibility across your public attack surface.

Internet-facing systems are exposed to constant change. An external assessment establishes what is reachable, identifies relevant known weaknesses and gives your team a prioritised plan for reducing exposure.

What we assess

  • Approved public IP addresses
  • Internet-facing servers
  • VPN gateways
  • Firewalls and remote access services
  • Externally accessible applications
  • TLS and certificate configuration
  • Exposed network services
  • Selected public cloud endpoints

Scope is documented and agreed before testing. Only explicitly authorised systems are assessed.

Assessment coverage

Know where external exposure becomes avoidable risk.

The assessment is designed to uncover common weaknesses across authorised public infrastructure and explain their practical significance.

01Known software vulnerabilities
02Outdated software and operating systems
03Exposed administrative services
04Insecure or deprecated protocols
05TLS configuration weaknesses
06Certificate issues
07Unnecessary exposed services
08Selected security configuration weaknesses
Deliverables

Evidence your team can use.

Clear documentation for leadership, technical teams and stakeholders who need to understand the assessment outcome.

View a Sample Report
D01
Executive summary
D02
Technical vulnerability report
D03
Prioritised findings
D04
Evidence for significant findings
D05
Affected assets
D06
Practical remediation guidance
D07
Remediation tracker
D08
Agreed retest results and final status
Engagement workflow

A controlled path from scope to verification.

You know what is happening, why it is happening and what comes next at each stage.

01

Scope

Confirm public assets, boundaries, exclusions and business context.

02

Authorise

Record explicit authority and agree testing contacts and windows.

03

Assess

Perform structured discovery and vulnerability assessment.

04

Review

Review significant findings and add relevant technical context.

05

Report

Deliver executive and technical reporting with clear priorities.

06

Retest

Verify agreed remediated findings and document current status.

Important distinction

Vulnerability Assessment vs Penetration Testing

A vulnerability assessment systematically identifies and evaluates weaknesses across an agreed scope. It is designed for broad visibility, prioritisation and remediation planning.

Penetration testing involves deeper manual exploitation techniques to test specific attack paths or objectives. This Vensora service is a vulnerability assessment and is not represented as a penetration test.

Transparent starting price
From $990 + GST

Final pricing depends on the number of internet-facing assets, network complexity, testing restrictions and reporting requirements. Scope and fixed price are agreed before testing begins.

Request a Fixed-Price Proposal
Common questions

What to know before the assessment.

Will testing disrupt our systems?
Vulnerability assessment is designed to be controlled and low impact, but no technical testing can be described as zero risk. Scope, timing, scan intensity and exclusions are agreed before work begins, and sensitive systems can be handled through an appropriate testing window.
Do you require written authorisation?
Yes. Testing begins only after the authorised customer representative has approved the target systems and assessment boundaries in writing. Third-party systems are excluded unless the customer can demonstrate appropriate authority.
How long does the assessment take?
A small external assessment is commonly completed within several business days after scope and access requirements are confirmed. The proposal will set expectations based on asset count, complexity and agreed testing windows.
Can you retest vulnerabilities after we fix them?
Yes. Retesting of agreed remediated findings can be included in the engagement. Results are recorded so stakeholders can see whether an issue is resolved, partially remediated or remains open.
Can this help with customer security questionnaires?
The assessment report and remediation status may provide useful evidence for customer or vendor reviews. It does not automatically certify compliance with a framework or guarantee acceptance by a third party.
Is this the same as a penetration test?
No. A vulnerability assessment systematically identifies and evaluates weaknesses. Penetration testing involves deeper manual exploitation techniques and different objectives. This service is accurately described as a vulnerability assessment.
Do you need onsite access?
External assessments are generally delivered remotely because the agreed systems are internet-facing. If the engagement includes internal or otherwise restricted systems, secure access requirements are agreed separately.
Start with clarity

Turn uncertainty into a clear remediation plan.

Request a scoped vulnerability assessment and receive a clear proposal based on your environment.

Request an External AssessmentView Services