Network Security
Segment, monitor, and harden your network like attackers can not wait to exploit it
What this engagement covers
The service
Network security program spanning segmentation, firewall ruleset review, NAC, IDS/IPS tuning, and network detection - delivered by engineers who have also broken into networks for a living.
What we test
Firewall and ACL rulesets, network segmentation boundaries, NAC enforcement, IDS/IPS efficacy, VPN configuration, and east-west visibility.
Scoping & Assessment Depth
Black Box Assessment
Zero-KnowledgeSimulates an external adversary targeting Network Security with no internal credentials, source code, or architecture documentation. Assesses perimeter exposure, unauthenticated attack paths, and edge resilience.
Gray Box Assessment (Recommended)
CredentialedSimulates an authenticated user, tenant, or insider threat within Network Security. We evaluate role segregation, authorization boundaries, privilege escalation, and business logic flaws across user tiers.
White Box / Source-Assisted
Full-KnowledgeConducted with direct access to architecture schematics, configuration files, and API/code documentation. Eliminates blind spots and provides exhaustive coverage of security mechanisms governing Network Security.
Attack Surface & Vulnerability Vectors
Any-any firewall rules
Rigorous testing and validation to uncover Any-any firewall rules across your Network Security environment. We produce deterministic proof-of-concept exploits to verify exploitability without risking service stability.
Flat network segments
Rigorous testing and validation to uncover Flat network segments across your Network Security environment. We produce deterministic proof-of-concept exploits to verify exploitability without risking service stability.
NAC in monitor-only mode
Rigorous testing and validation to uncover NAC in monitor-only mode across your Network Security environment. We produce deterministic proof-of-concept exploits to verify exploitability without risking service stability.
IDS signatures stale by years
Rigorous testing and validation to uncover IDS signatures stale by years across your Network Security environment. We produce deterministic proof-of-concept exploits to verify exploitability without risking service stability.
Split-tunnel VPN misconfigurations
Rigorous testing and validation to uncover Split-tunnel VPN misconfigurations across your Network Security environment. We produce deterministic proof-of-concept exploits to verify exploitability without risking service stability.
Management interfaces on guest networks
Rigorous testing and validation to uncover Management interfaces on guest networks across your Network Security environment. We produce deterministic proof-of-concept exploits to verify exploitability without risking service stability.
How we run it
Architecture review, ruleset cleanup, segmentation validation, IDS/IPS tuning, and ongoing detection content authoring for network sensors.
Architecture and asset discovery
Rigorous technical execution, boundary verification, and manual exploitation testing targeting architecture and asset discovery across your network security deployment.
Ruleset collection and analysis
Rigorous technical execution, boundary verification, and manual exploitation testing targeting ruleset collection and analysis across your network security deployment.
Segmentation testing
Rigorous technical execution, boundary verification, and manual exploitation testing targeting segmentation testing across your network security deployment.
NAC posture validation
Rigorous technical execution, boundary verification, and manual exploitation testing targeting nac posture validation across your network security deployment.
IDS/IPS baseline and tuning
Rigorous technical execution, boundary verification, and manual exploitation testing targeting ids/ips baseline and tuning across your network security deployment.
Continuous drift monitoring
Rigorous technical execution, boundary verification, and manual exploitation testing targeting continuous drift monitoring across your network security deployment.
What you receive
Findings land in your tracker as you go, not only in a PDF at the end. Retest is in scope, not a change order.
- Network architecture review
- Firewall ruleset cleanup and documentation
- Segmentation validation testing
- NAC policy hardening
- IDS/IPS tuning and custom detections
- VPN configuration hardening
- Quarterly drift review
What we usually find
The issues this engagement surfaces most often. Yours will differ, but this is the shape of it.
Who this is for
Auditor-Ready Compliance Crosswalk
| Framework | Control Section | Testing Evidence & Report Deliverable |
|---|---|---|
| PCI DSS v4.0 | Requirement 11.4 & 11.4.3 | Adversary-driven external and internal penetration testing with application-layer validation and vulnerability remediation verification. |
| SOC 2 Type II | CC4.1, CC7.1, CC7.2 | Technical testing evidence validating system boundaries, access restrictions, and vulnerability identification controls. |
| HIPAA Security Rule | 45 CFR § 164.308(a)(8) | Formal technical evaluation verifying the integrity of ePHI safeguards, network segmentation, and privileged access safeguards. |
| NIST Cybersecurity Framework | PR.AC, DE.CM, RS.AN | Technical testing verifying access controls, anomaly detection efficacy, and incident response mitigation capabilities. |
| CMMC 2.0 Level 2 / 3 | CA.L2-3.12.1, SC.L2-3.13.1 | Technical validation of Controlled Unclassified Information (CUI) protection, perimeter defense, and enclave isolation. |
Findings are mapped to PCI-DSS, SOC 2, HIPAA, NIST CSF, CMMC, so the report drops into an audit package rather than needing to be translated first. If you need the readiness work behind one of those, that is a separate engagement.
Frequently Asked Questions
Direct answers on scoping, methodology, compliance validation, and deliverables.
Our Network Security service combines deep manual testing with automated verification. We cover: Network architecture review, Firewall ruleset cleanup and documentation, Segmentation validation testing, NAC policy hardening, IDS/IPS tuning and custom detections. Every engagement includes reproducible proof-of-concept exploits, developer-ready remediation guidance, and a free retest.
Yes. Findings are directly mapped to PCI-DSS, SOC 2, HIPAA, NIST CSF, CMMC control requirements. The resulting report is auditor-ready and formatted for immediate submission to SOC 2 CPAs, PCI QSAs, and enterprise vendor risk assessment teams.
Yes. Every Lorikeet Security engagement includes free retesting within 30 to 60 days to validate that your remediation patches successfully resolve the identified vulnerabilities before your final report is issued.
Typical active testing turnaround is 6-10 weeks, with critical findings reported immediately via your Talon portal so your engineering team can begin remediation without waiting for the final PDF.
Pricing starts from $18,000. We scope the engagement in one call based on your environment's surface area, user roles, and complexity, providing a transparent, fixed-price quote with no hidden change orders.
Scope it in one call
Tell us what is in scope and we come back with a fixed price and a start date. No discovery-call maze, no hourly estimate that moves.
