Wi-Fi penetration testing and security assessment services

Wi-Fi Security Assessment

Your wireless network is your perimeter. Let's test how secure it really is.

Wireless security testing of your corporate and guest networks. We test encryption strength, identify rogue access points, assess network isolation, and evaluate captive portal security.
Request a Quote View Pricing
CREST member company, accredited for penetration testing CREST-accredited penetration testing Cyber Essentials certified
  • CREST-accredited
  • Consultant-led testing
  • Transparent pricing

Who Needs This

Who needs a Wi-Fi security assessment?

Any organisation that relies on wireless networks for business operations has an attack surface that is accessible from outside the building perimeter.

Wi-Fi security testing is particularly relevant for organisations where wireless is a primary access method, and is often scoped alongside a wider network penetration test.

Office-based organisations

Corporate wireless networks grant access to internal systems. Weak authentication, misconfigured encryption, or insufficient network segmentation can provide an attacker with a foothold in your internal environment.

Businesses with guest networks

Guest Wi-Fi networks must be properly isolated from corporate infrastructure. Segmentation failures between guest and corporate networks are a common finding with potentially significant impact.

Retail and hospitality environments

High-traffic environments with open or semi-open wireless networks require assessment of encryption standards, captive portal security, and isolation between customer and operational networks.

Organisations with BYOD policies

Networks that allow personal devices require strong access controls to prevent unauthorised access and ensure that compromised personal devices cannot pivot to sensitive resources.

What We Test

What does a Wi-Fi security assessment include?

Our wireless security testing covers the full range of corporate and guest wireless infrastructure, applying both passive monitoring and active testing techniques.

  • Encryption & Protocol Assessment

    Assessment of WPA2 and WPA3 configuration, identification of weak cipher suites, and testing of legacy protocol support (WEP, TKIP) that may remain enabled for compatibility reasons.

  • Authentication Testing

    PSK strength testing, WPA2-Enterprise authentication assessment, RADIUS configuration review, and testing for authentication bypass vulnerabilities.

  • Rogue Access Point Detection

    Identification of rogue and evil twin access points in range of your premises that could be used to intercept traffic from users connecting to spoofed networks.

  • Network Segmentation

    Testing whether guest, corporate, and IoT network segments are properly isolated, and whether an attacker with guest network access can reach internal resources or other guest clients.

  • Captive Portal Security

    Assessment of captive portal authentication, bypass techniques, and whether the portal implementation exposes user data or allows access to restricted resources without authentication.

  • Connected Device Assessment

    Review of wireless clients, their connection behaviour, and whether connected devices can be targeted by attacks from others on the same network segment.

Pricing

From £1,600

for Wi-Fi security assessment

Not sure where your deployment fits? A 30-minute scoping call is free and gets you a fixed written quote.

Book scoping call Request a quote

No obligation · Strictly confidential · Reply within one business day

Pricing Examples

Single location
1 to 3 access points
£1,600 - £2,000
Two locations
Two separate physical sites
£2,000 - £2,500
Multi-location assessment
Three or more sites, scoped per location
£3,000+
Indicative ranges only. Your exact price is confirmed after a short scoping conversation. See full service pricing.

Compare all our penetration testing services.

What's Included

  • Fixed-price proposal agreed before testing starts
  • Manual, consultant-led testing. Not automated scans
  • Report within 2 business days, with an executive summary and technical findings including specific configuration fixes
  • Debrief call and Exploitr platform access at no extra cost
  • Travel is charged in addition to the fixed price and agreed in your proposal

Common Questions

Wi-Fi security assessment: frequently asked questions

Wi-Fi security assessments start from £1,600 for a single location with up to three access points, which covers a minimum of one day on site and half a day of remote reporting. Assessments covering two sites start from £2,000, and three or more sites from £3,000. Travel to your site is charged in addition. The number of sites in scope is the main cost driver. A large number of wireless networks at one site can add testing time.

Our penetration testing pricing guide compares costs across every service.

Wi-Fi security testing (also called wireless penetration testing) assesses the security of your wireless networks to identify vulnerabilities that could allow unauthorised access, eavesdropping, or attacks against connected devices. We test authentication mechanisms, encryption protocols, access point configurations, and the security of devices connected to your wireless network.

Yes, Wi-Fi testing requires physical presence since wireless signals are location-dependent. We'll visit your office or facilities with our specialised equipment. Most engagements require at least 1 day on-site. For multi-location organisations, we can coordinate testing across sites. Travel is charged in addition to the fixed price and confirmed in your proposal.

Most testing activities are passive or low-impact and won't affect normal operations. However, certain tests such as deauthentication attacks may cause brief, localised disruptions.

We can perform this type of testing against a provided representative device for instances where business impact is a concern.

A Wi-Fi security assessment focuses specifically on your wireless infrastructure: the access points, protocols, authentication, and segmentation. An internal network penetration test covers the broader internal network environment, which may include wireless as one component. Many organisations commission both as complementary assessments.

Yes, enterprise wireless authentication using RADIUS, EAP-TLS, PEAP, and related protocols is assessed for configuration weaknesses, certificate validation issues, and authentication bypass vulnerabilities.

Ready to test your wireless security?

Our team will scope your wireless assessment and provide a tailored proposal for your environment. Get a fixed price quote today.
Get a Pentest Quote