The tests can be performed from outside, i.e. against systems which are accessible from the Internet, or internally, i.e. directly from the respective network segment (e.g. your office network or a DMZ).
The target of attack can therefore be various systems and IT infrastructure components, e.g. web and email servers, VPN gateways, domain controllers or file and database servers.
We also check your firewall, switches, WLAN access points, virtualizations and complete network areas/infrastructures for vulnerabilities.