01 / External attack simulation
Sign up with your work email. Starting from that domain, we map everything your organisation exposes to the internet and attack it the way a real adversary would, then come back with a written penetration test report.
Stronger
systems start
outside.
AI is handing real offensive capability to people who never had it, and sharpening the ones who did. Reconnaissance, exploit-writing and scanning that used to take a skilled team days now runs in minutes, at scale, against everyone at once.
Criminal crews and state actors are the early adopters. The gap between a weakness being exposed and being exploited is closing fast, and when it closes on you it is not a slow leak. It is your operations, your data and your name, all at once.
Far better to find what's weak yourself, on your terms, than to learn it from someone who wants you gone.
No internal access, no credentials from you, no hints. We start from the same position an attacker on the internet starts from: your domain name.
See how we test, in detailThe listed hosts are minimum report coverage. Authorization also covers related customer-controlled subdomains discovered during testing.
We perform controlled, low-impact checks across the authorized domain and related customer-controlled subdomains and record the limitations and outcomes. Up to 2 business days of active testing in the standard scope.
We prepare the complete report within 10 business days, including evidence and recommendations. Receive a free overview; optional payment unlocks full report delivery.
External attack simulation.
Hardened systems.
Standard SME scope · larger scopes quoted separately
1 000EUR
for the standard external test · excl. VAT
Own or advise several companies? Portfolio pricing on request.
Prices exclude VAT. Spanish IVA (21%) is added for customers in Spain. EU businesses with a valid VAT number are invoiced under reverse charge. Customers outside the EU pay no VAT.
The full pentest and complete report are prepared at no charge. Receive a free overview, then choose whether to buy delivery of the full report for 1 000 EUR.
EXTERNAL10 was founded by Jens Berlips, a serial entrepreneur and hands-on engineer. He co-founded and chairs ApoEx, and advises the SecureDNA Foundation on safeguarding DNA synthesis against misuse.
His return to building with AI is the same shift now arming attackers, and the reason EXTERNAL10 exists.
Your work email and company are all we need to start. Its domain is our starting point. One primary domain and related customer-controlled subdomains. Starting hosts define minimum report coverage. The same full pentest is performed whether or not you buy the report. The assessment and overview are free. Optional full report delivery costs 1 000 EUR excl. VAT. Payment does not change the testing.