Penetration Testing | Windsor & Berkshire
Penetration testing for Windsor businesses: we test your network, website and cloud accounts the way an attacker would, then show you each weakness we found and how to close it.
Test my systemsTrusted pen testing, industry certified.
Penetration testing for Windsor businesses
A penetration test is an authorised, simulated attack on your own systems. A tester tries to get in through your internet connection, firewall, website, Wi-Fi and staff accounts, using the methods criminals use, and records every route that works. Unlike a scan on its own, a pen test proves which flaws can be exploited.
It suits Windsor firms that hold client data, take bookings online, run guest Wi-Fi or are working towards Cyber Essentials Plus, and anyone whose insurer or client has asked for proof of testing.

Our difference
A scan tells you what might be wrong. A pen test shows what an attacker could really do with it, and our report tells you what to fix first, in plain English.
We test everything that faces the internet: your firewall, VPN, remote access, email server, website host and public IP addresses, looking for ways in from outside.
We connect on site, test your office and guest Wi-Fi, and see how far an intruder could move from a single PC.
We check your website, booking forms and customer logins for flaws such as weak passwords and data leaks.
Every finding is rated by severity, with evidence and a fix. Directors get a short summary, and your IT team gets the detail.
Once the fixes are in, we test again to confirm each finding is closed, so you have proof for clients.
Tested and untested
Most weaknesses stay hidden until someone goes looking for them. Here is what changes once a Windsor business has its systems properly tested.
| Risk | Untested | After fixes and retest |
|---|---|---|
| Remote access | An old VPN with a known flaw nobody has patched. | The flaw found, rated critical and fixed first. |
| Website forms | A booking form that quietly exposes customer details. | The form fixed and retested, with proof for clients. |
| Admin passwords | Shared admin passwords reused across devices. | Every reused admin password found and changed, with MFA. |
| Guest Wi-Fi | Visitors on the same network as your servers. | Guest traffic separated and the separation tested. |
Our process
Every penetration test starts with a written scope, so you know what we will test, when and how. We agree test windows that avoid your busy periods, keep you updated while the work runs and stop at once if anything risks disrupting your systems.
We list the IP addresses, websites, offices and accounts in scope, agree dates and rules of engagement, and confirm everything in writing first.
Our testers combine vulnerability scanning with manual testing, trying each weakness to see how far it could take a real attacker.
You get a written report with every finding rated by severity, the evidence behind it and the steps to fix it, and we talk your directors and IT team through it on a call.
Once fixes are in, we retest to confirm they hold. We suggest testing once a year and after any major change to your IT.
Frequently asked questions
The price depends on the scope: how many IP addresses, websites, offices and user accounts we test, and whether the work is external only or includes an internal test on site. We agree the scope with you first and give you a fixed quote in writing, so the cost does not change once testing starts.
A vulnerability scan is automated and lists known weaknesses, including some false alarms. A pen test adds a person who confirms which ones are real, links them together and shows what an attacker could reach. Scans suit regular checks, and a pen test goes deeper.
Testing is planned to avoid disruption. We agree test windows, avoid risky techniques on live systems unless you approve them, and stop straight away if a service is affected. Most staff will not notice the work.
No. Cyber Essentials Plus has its own audit by a certified assessor. A pen test goes further, and fixing its findings helps you pass.
We tell you straight away rather than waiting for the report. If a weakness puts your data at immediate risk, we explain the quick fix and can apply it for you, then carry on testing the rest of the agreed scope. Call 01753 255436 to talk it through.
At least once a year, and again after a big change such as a new firewall, a new website, an office move or a cloud migration. Some clients and insurers set their own timetable, so check your contracts and policy wording too.
Yes. We test firms in Eton, Datchet, Slough, Maidenhead, Ascot, Egham and Staines. External tests run remotely, and internal tests take place on site.
Get in touch
Tell us what you want tested, from one website to every office and account, and we will scope the work and send a quote. Call 01753 255436, email hello@windsoritsupport.co.uk or send us a message and a tester will get back to you.
Contact us