PENETRATION TESTING

WIRELESS &
WI-FI
PENTESTING

One church network usually serves staff during the week, a few hundred visitors on Sunday, the check-in tablets in the kids wing, and whatever the AV booth is plugged into — often on gear that was set up once and left alone.

Wireless is the one part of your network someone can reach without walking through your doors. Testing it measures what a person sitting in the parking lot can actually get to.

Schedule a Security Conversation

WHAT WE ASSESS

Encryption & Handshakes

We capture the WPA2 handshake and PMKID and test them offline to see whether your passphrase holds up. On WPA3 we check transition mode, which still permits a WPA2 downgrade.

Guest Network Separation

Whether Sunday guest Wi-Fi can reach staff machines, printers, the kids check-in tablets, or your church management system.

Evil Twin & Captive Portals

We stand up a lookalike access point with your network name and see who connects to it and what we can collect when they do.

WPA2-Enterprise & 802.1X

If staff log in with their own accounts, we check certificate validation on their devices and whether a fake RADIUS server can harvest those credentials.

WPS & Older Access Points

WPS PIN weaknesses, and the access point still broadcasting from a closet nobody has opened in three years.

Coverage & Connected Devices

How far your signal carries past the property line, and what is riding on it — cameras, thermostats, livestream and AV gear.

HOW WE WORK ON SITE

Wireless testing has to happen in the building, so we schedule it around your week rather than the other way around. Most of it is passive listening, which changes nothing for anyone using the network.

The parts that are not passive — standing up a lookalike access point, or testing whether guest Wi-Fi can reach staff systems — get agreed in advance, with limits on what we touch and when we do it. Nothing runs during a service.

FIND OUT WHAT IS REACHABLE

Guest Wi-Fi, staff Wi-Fi, and whatever else is on the radio. Worth knowing what is on there, and what it can reach.

Get Started