Skip to content
VENSORASECURITY
Internal Vulnerability Assessment

Find weaknesses inside your network before they become attack paths.

Assess authorised internal systems, servers, endpoints and network infrastructure for vulnerabilities, insecure configurations and outdated software.

Request an Internal AssessmentView Methodology
Indicative investment
From $1,490 + GST

Final pricing is confirmed after a short scope review.

Service overview

See beyond the perimeter.

Internal weaknesses can allow a compromised account or device to create wider impact. An internal assessment builds visibility across authorised systems and identifies where patching, configuration or legacy technology creates avoidable risk.

What can be assessed

  • Windows servers
  • Linux servers
  • Workstations
  • Network appliances
  • Printers and embedded devices where appropriate
  • Internal web services
  • Selected infrastructure components
  • Agreed internal network ranges

Network ranges, assessment depth, credentials, sensitive systems and testing windows are agreed with your authorised technical contact.

Assessment coverage

Build a clearer picture of internal exposure.

Authenticated assessment can provide deeper visibility into patching and software configuration where secure credentials are provided. Unauthenticated assessment shows what is observable from the agreed network position.

01Missing security updates
02Unsupported operating systems and software
03Insecure network services
04Weak protocol configuration
05Selected access control observations
06Certificate and encryption issues
07Exposed management interfaces
08Relevant configuration weaknesses
Deliverables

Evidence your team can use.

Clear documentation for leadership, technical teams and stakeholders who need to understand the assessment outcome.

View a Sample Report
D01
Executive report
D02
Detailed technical findings
D03
Severity ratings
D04
Affected asset inventory
D05
Evidence for significant findings
D06
Practical remediation guidance
D07
Remediation tracker
D08
Retest results for agreed fixes
Engagement workflow

A controlled path from scope to verification.

You know what is happening, why it is happening and what comes next at each stage.

01

Scope ranges

Agree internal networks, assets, assessment mode and exclusions.

02

Agree window

Set timing, technical contacts and safeguards for sensitive systems.

03

Configure

Prepare authorised access and assessment settings for the environment.

04

Discover

Run controlled internal vulnerability discovery within agreed scope.

05

Review

Examine significant findings and prioritise using business context.

06

Report & retest

Deliver clear actions and verify agreed remediated findings.

Assessment depth

Authenticated visibility, explained plainly.

Without credentials, an assessment observes what a system exposes to the network. This is useful for understanding reachable services and externally observable weaknesses from the selected network position.

With securely provided authorised credentials, assessment tooling can inspect patch status and installed software in more depth. Credentials are used only for the agreed work and handled according to the engagement’s secure access plan.

Transparent starting price
From $1,490 + GST

Final pricing depends on asset count, network segments, locations, assessment depth, secure access requirements and reporting scope. A fixed proposal is agreed before work begins.

Request a Fixed-Price Proposal
Common questions

What to know before the assessment.

What is the difference between authenticated and unauthenticated assessment?
Unauthenticated assessment views systems from the network without logging in. Authenticated assessment uses securely provided, authorised credentials to inspect patching, installed software and selected configuration in greater depth. It does not imply exploitation or unrestricted administrative activity.
How do you connect to our internal network?
The safest suitable method is agreed during scope. Options can include an onsite assessment device or a controlled remote connection arranged with your IT team. Access is limited to the approved engagement requirements.
Will every workstation need an agent installed?
Not necessarily. The assessment design depends on the environment, network visibility and whether authenticated checks are approved. Requirements are confirmed before the proposal is finalised.
Can our managed service provider help remediate findings?
Yes. The report is structured to give an internal team or IT provider the affected assets, evidence and recommended actions needed to plan remediation. Vensora can also clarify findings and verify agreed fixes.
Do you exploit vulnerabilities during the assessment?
No. This service focuses on vulnerability discovery, review and prioritisation. It is not sold as penetration testing, and intrusive exploitation is not included unless separately scoped as a different authorised service in the future.
Can sensitive systems be excluded?
Yes. Exclusions, testing windows and scan intensity can be agreed for fragile or operationally sensitive systems. These limitations are recorded so the report accurately describes assessment coverage.
Start with clarity

Turn uncertainty into a clear remediation plan.

Request a scoped vulnerability assessment and receive a clear proposal based on your environment.

Request an Internal AssessmentView Services