Black-Box
Penetration Testing
See what an outside attacker could discover. We test your agreed targets without source code or internal accounts.
Overview
See what an outsider sees.
It is ideal for validating your external exposure and incident readiness. Because no insider knowledge is shared, black-box testing favours breadth of discovery; pairing it with grey-box testing later gives deeper coverage for the same systems.
Approach
What black-box covers.
External-attacker simulation with no prior knowledge or access.
- Open-source intelligence (OSINT)
- Attack-surface discovery
- Unauthenticated exploitation
- External service & app testing
- Credential attacks & brute force
- Exposure & data-leak discovery
- Real-world attack-path mapping
- CVSS-scored findings
FAQ
Black-box penetration testing FAQ
Scope, cost, and what happens next.
How much does black-box penetration testing cost?
Black-box testing typically starts around €2,000 and scales with the size of the attack surface. Because no insider information is provided, it can take longer per finding than grey-box. Use our estimator for a tailored figure.
What is black-box penetration testing?
Testing performed with no prior knowledge, credentials, or source code — the tester works exactly as an external attacker would, starting from reconnaissance.
When should we choose black-box over grey-box or white-box?
Choose black-box to validate your external exposure and detection. Choose grey-box for the best coverage-per-budget, and white-box for the deepest, most thorough review.
Is black-box testing enough on its own?
It is excellent for realism but can miss issues only visible with access. Many organisations alternate black-box and grey-box engagements over time.
What do we receive?
A CVSS-scored report with reproduction steps, an executive summary, an attestation letter, and a free retest within 60 days.
What do you need to start a black-box test?
Just the in-scope targets (domains, IPs, or app URLs) and written authorisation — no credentials or documentation.
More questions about this service
Does black-box guarantee you find everything?
No approach guarantees that; black-box maximises realism but can miss issues only visible with access, which is why grey-box often complements it.
Is black-box more expensive?
It can take longer per finding because time is spent on discovery, but scope and depth ultimately drive the price.
Can black-box include social engineering?
Yes — realistic external attacks often combine technical and social vectors; we agree this in scope.
What do we receive?
A CVSS-scored report with reproduction steps, an executive summary, an attestation letter, and a free retest within 60 days.
Related services
Explore more.
Ready for a realistic attack simulation?
A 30-minute scoping call costs nothing. A real breach costs considerably more.
Book a short call Send an email