Testing the tenant, not just the network

Offensive testing scoped to Microsoft's cloud stack — Azure infrastructure, the Microsoft 365 tenant, and the Entra ID identity layer that underpins both.

3

Named Engagements

CLD

Reference Prefix

02/09

Testing Discipline

Exploitation

Kill-Chain Stage

Cloud Security Penetration Testing

Each engagement carries its own reference code for scoping — combine across disciplines to cover your full attack surface.

01 NET 02 CLD 03 INF 04 WRL 05 IAM 06 SEC 07 RDY 08 CTS 09 PAS

CLD-01

Microsoft Azure Penetration Testing

Tests Azure subscriptions, resource configuration, and cloud-native attack paths.

CLD-02

Microsoft 365 Security Assessment

Assesses the M365 tenant for exploitable misconfiguration and privilege escalation paths.

CLD-03

Entra ID (Azure AD) Security Assessment

Tests identity configuration, conditional access, and privileged role assignment in Entra ID.

← 01 / NET Network Penetration Testing 03 / INF → Infrastructure Security Testing

Need help with cloud security penetration testing?

Tell us where cloud security penetration testing sits in your current programme — we'll scope the right service, or the full register.

Request a Scoping Call