01 / External attack simulation
Sign up with your work email. Starting from that domain, we map everything your organisation exposes to the internet and attack it the way a real adversary would, then come back with a written report and a debrief meeting.
Stronger
systems start
outside.
AI is handing real offensive capability to people who never had it, and sharpening the ones who did. Reconnaissance, exploit-writing and scanning that used to take a skilled team days now runs in minutes, at scale, against everyone at once.
Criminal crews and state actors are the early adopters. The gap between a weakness being exposed and being exploited is closing fast, and when it closes on you it is not a slow leak. It is your operations, your data and your name, all at once.
Far better to find what's weak yourself, on your terms, than to learn it from someone who wants you gone.
No internal access, no credentials from you, no hints. We start from the same position an attacker on the internet starts from: your domain name.
We map what your organisation exposes to the internet, starting from your domain: related domains, hosts, services, mail, web apps, forgotten subdomains.
We attempt real attacks against what we find, the way an outside adversary would, and record how far each one gets. 5 business days of active testing.
A written penetration test report within 10 business days: what we found, how we got in, how severe it is, and what to fix first.
A 60-minute video call within 5 business days of the report, with the tester who did the work. We walk your team through the findings and answer questions.
External attack simulation.
Hardened systems.
Report in hand.
Questions answered.
Held within 5 business days of the report, with the tester who did the work.
One engagement, one price
1 000EUR
per external attack simulation · excl. VAT
Own or advise several companies? Portfolio pricing on request.
Prices exclude VAT. Spanish IVA (21%) is added for customers in Spain. EU businesses with a valid VAT number are invoiced under reverse charge. Customers outside the EU pay no VAT.
Nothing to pay up front. We invoice 1 000 EUR once the report is delivered and the debrief meeting is done. Bank transfer or card, 14 days.
EXTERNAL10 was founded by Jens Berlips, a serial entrepreneur and hands-on engineer. He co-founded and chairs ApoEx, and advises the SecureDNA Foundation on safeguarding DNA synthesis against misuse.
His return to building with AI is the same shift now arming attackers, and the reason EXTERNAL10 exists.
Your work email and company are all we need to start. Its domain is our starting point. One engagement, 1 000 EUR excl. VAT, report and debrief meeting included.