Skip to content
Halberd Security
Authorised testing only. We test only with the owner's written authorisation, so scope is agreed before testing begins. Unauthorised testing is also illegal under the Computer Fraud and Abuse Act.

Service

Wireless penetration testing: from the car park to your network

Wireless penetration testing checks whether someone near your building could join your network, intercept traffic or reach internal systems through Wi-Fi. It needs a tester on site, so it is scoped per location.

  • Named tester before day one
  • One retest within 30 days
  • OWASP WSTG and NIST SP 800-115
Wireless penetration testing: survey the signal, test the networks and report the gaps

What wireless penetration testing covers

Wi-Fi reaches beyond your walls. Therefore the test starts outside and works inwards.

  • Encryption and authentication settings on each network
  • Separation between guest and corporate networks
  • Rogue or forgotten access points
  • Attacks against staff devices that connect automatically
  • What an attacker can reach after joining

Guest networks and segmentation

A common finding is a guest network that can still reach printers, cameras or internal servers. Consequently, the test always checks whether segmentation actually holds, not just whether it is configured.

Wireless penetration testing readiness

Tick what you can confirm. On-site work needs more planning than remote testing.

Your result appears here as you tick, so you can see what is still open.

On-site logistics

Wireless penetration testing needs physical presence near your premises. So we agree dates, locations, building access and who on site knows the test is running. Each location is scoped separately.

Scoping inputWhy it matters
Number of locationsEach needs a site visit.
Floors and buildingsSignal coverage changes with layout.
Number of networksEach network has its own settings to test.
Authentication typeEnterprise and shared-key setups are tested differently.

How wireless penetration testing is reported

Each finding includes where it was observed, what was proved and the fix. In addition, the report includes a short summary for facilities and IT. One retest is included for configuration changes.

Price and availability

Wireless work is quoted per site after scoping, because travel and coverage vary widely. We confirm availability for your locations before we send a fee. The method follows NIST SP 800-115.

Wireless penetration testing questions

Does wireless penetration testing need someone on site?

Yes. Wi-Fi can only be tested from within range, so a tester visits each location.

Will it disrupt staff Wi-Fi?

No disruptive attacks run without separate approval. Most checks are passive or targeted at test devices.

Can wireless penetration testing cover several offices?

Yes. Each site is scoped and priced separately.

What do we need to prepare?

Network names, building access and a local contact for the day.

Related guides

Ask about wireless penetration testing for your sites

Tell us the number of locations and networks. We confirm availability and reply with a written scope.

Get my estimate