Manual testing of the systems you actually run — perimeter, applications, network — done the way an attacker works: one path at a time, documented so your engineers can replay every step.
Smaller scope fits Basalt Recon — 4 days, from €2 500.
Book a scoping callSigned authorization first · public standards (PTES, OWASP, NIST, ATT&CK) · report reviewed by a second engineer · retest within 30 days included · your data destroyed in 30 days · late report = 10% off, in the contract.