Services
Wireless & Networks
Wi-Fi and network infrastructure designed, deployed, then attacked to prove it holds.
What you get
- Wireless penetration testing with a prioritised remediation plan
- Wi-Fi design, site survey and heat mapping
- Access point deployment and controller configuration
- Network segmentation — guest, staff, payment and operational traffic separated
- Rogue access point detection and wireless intrusion monitoring
- Structured cabling and switching design for new or renovated premises
Outcomes
- Coverage that works in the corners of the building, not just near the router
- A guest network that genuinely cannot reach your file server
- Documented proof of what an attacker in your parking lot can and cannot do
- A network diagram that matches reality
Capabilities
Wireless penetration testing
Testing your Wi-Fi the way an attacker would: from the parking lot, the lobby, the unit next door. Rogue access points, evil twins, weak authentication, captive portal bypass and guest-to-internal pivoting.
Wi-Fi design and site survey
Predictive and on-site surveys, heat mapping, channel planning and access point placement. Coverage engineered from measurements rather than guessed from a floor plan.
Network segmentation
Separating guest, staff, payment, IoT and operational traffic with VLANs and enforced rules, so one compromised device is not a path to everything.
Access point and controller deployment
Enterprise wireless deployed and configured properly — WPA3 where supported, certificate-based authentication for staff, isolated guest access, sensible roaming.
Rogue detection and monitoring
Identifying access points that should not be there, whether an employee's convenience router or something an attacker left behind.
Cabling and switching
Structured cabling, switch selection, PoE planning and documentation for new premises, renovations and expansions.
The part of your network that leaves the building
Everything else on your network requires an attacker to get past the front door or through the firewall. Wireless broadcasts past your walls by design.
That does not make Wi-Fi dangerous — it makes it worth engineering rather than plugging in. Most of what we find is not sophisticated. It is a decade-old pre-shared key that half the former staff still know, a guest network on the same flat segment as the accounting server, and one legacy printer forcing the whole network onto weaker encryption.
Testing it properly
Wireless testing means working the way an attacker actually would, from where they would actually stand:
- From outside. What is visible and reachable from the parking lot or the street?
- As a guest. You gave us the lobby password. Can we reach anything we should not?
- As an impostor. Can we stand up a network that looks like yours and have devices connect?
- Against authentication. Are pre-shared keys crackable? Is enterprise authentication validating certificates, or accepting anything?
- Across segments. Once on one network, what else can we reach?
You get findings ranked by what is actually exploitable, with the remediation ordered by effort and impact rather than by scanner severity.
Building it right in the first place
Security and coverage are the same problem more often than people expect. When Wi-Fi does not reach the warehouse, someone plugs in their own router. That router is now an unmanaged, unmonitored, probably badly-configured entry point — and it exists because of an engineering failure, not a discipline failure.
So we survey properly: predictive modelling, on-site measurement, heat mapping, channel planning and access point placement based on how the building actually behaves rather than how the floor plan suggests it should.
Segmentation is the control that matters
If we could change one thing in a typical small business network, it would be this. Guest traffic, staff devices, payment systems, IoT and operational equipment all sharing one flat network means a single compromised laptop — or one thermostat with a default password — has a route to everything.
Proper segmentation turns a breach into an incident instead of a catastrophe. It pairs directly with the backup and recovery work that determines how bad a bad day gets.
Frequently asked questions
Is our Wi-Fi really a security risk?
It is the one part of your network an attacker can reach without entering the building. Someone in your parking lot, the office next door, or the floor above is inside radio range. The common findings are weak or shared pre-shared keys, a guest network that routes to internal systems, and legacy devices forcing the whole network down to weaker encryption.
What is an evil twin attack?
An attacker broadcasts a network with the same name as yours. Devices that have connected before may associate automatically, and the attacker sits between your staff and the internet. Defences are certificate-based authentication rather than a shared password, plus monitoring for access points impersonating yours.
Our Wi-Fi is slow and drops in parts of the building. Is that a security issue?
Usually not directly, but it causes one. When coverage is poor, people add their own routers and hotspots, and those become unmanaged entry points. Fixing coverage properly removes the incentive, which is why we treat design and security as the same engagement.
Do we need to separate our guest network?
Yes, and separation needs to be real rather than nominal. We regularly find guest networks that are a different SSID on the same flat network — meaning a guest, or anyone who obtained the guest password, can reach file servers and printers. Proper segmentation enforces the boundary at the network layer.
Can you test wireless without disrupting our business?
Yes. The majority of testing is passive observation and authentication analysis, which is non-disruptive. Anything with disruption potential is scheduled with you in advance, usually outside business hours, and nothing is run without your written authorisation.
Related services
Cybersecurity
Incident response, ransomware recovery, and hardening that holds up under audit.
Learn moreInfrastructure & Backup
Servers, clusters and backups designed so that failure is survivable and boring.
Learn moreMobile App Development
iOS, Android and cross-platform apps — with AI on device and the security done properly.
Learn moreTell us what is breaking — or what you are trying to build.
You get a senior engineer on the first call, not a salesperson. If we are not the right fit, we will say so and point you somewhere better.
Active incident? Write “URGENT” in your message and we prioritise it.