CENNTIR RED TEAM · SECURITY & PERFORMANCE

Your probe.
Your audits.
Your control.

Deploy your observation point. Compare measurements from inside and outside your infrastructure. Identify risks, understand bottlenecks and verify your fixes.

Our tool selection and AI approach ↗Nmap · Metasploit · OpenVAS · Nuclei · ZAP
XXX € excl. VAT / month

12-month minimum commitment

Request my 7-day free trial ↗Let CENNTIR run my audit →
CENNTIR / RED TEAMIllustrative demonstration
MISSION / LAN-001

From guest Wi-Fi to your servers: who can reach what?

A local probe observes your segments. An external point checks exposure. Combined findings explain intended access and unexpected paths.

Your infrastructure
External probeEXT · 192.0.2.10
FirewallIPv4 / IPv6
Server probeENDPOINT · VM
Local probeLAN · Wi-Fi
MISSION STEPS

Observe devices

EVIDENCE / 01

€XXX/month excl. VAT · 12-month minimum term · 7-day trial after activation · Illustrative demonstration

01 / YOU TAKE CONTROL

Your audit platform, all year round.

For IT teams, integrators and service providers who want their own probe, a way to plan missions and a record of improvements over time.

  • One probe specified in the contract, software or hardware as agreed
  • Access to the audit catalogue and available features in your plan
  • Network, web and performance missions with qualified prerequisites
  • Coordinated scenarios with compatible observation points
  • Structured results, observation history and retests
  • Documentation and onboarding support
7-day free trial on request
RED TEAM
PLATFORM

XXX €

excl. VAT / month

12-month minimum commitment

Request my 7-day free trial ↗

Your trial starts after eligibility is confirmed and access is activated. A paid subscription is confirmed separately: €XXX/month excluding VAT for at least 12 months, a minimum of €XXX excluding VAT. Hardware, shipping and additional probes are specified in the quote. New native Red features are being qualified progressively.

CENNTIR / TOOLKIT

Established pentest tools. Enhanced by AI and our expertise.

THE INSTRUMENTS, AND THE EXPERTISE TO INTERPRET THEM

Nmap, Metasploit, OpenVAS: recognised names with a specific role in each mission. CENNTIR is designing their orchestration around your objectives, multiple probes and specialist scripts, turning technical results into useful decisions.

01

Nmap

Map services

Discover hosts, ports and services, with NSE scripts selected for the agreed scope.

02

Metasploit Framework

Validate a specific risk

Pentest modules to verify, within the agreed engagement, whether a vulnerability can have a real impact.

03

OpenVAS / Greenbone

Find vulnerabilities

Vulnerability scanning using maintained tests and feeds, with findings to review and confirm.

04

Nuclei

Target your checks

Repeatable checks using targeted templates for exposure, configurations and known vulnerabilities.

05

ZAP

Audit websites and APIs

Application discovery, authenticated journeys and web/API security tests for the selected scenario.

06

Wireshark / TShark

Understand network exchanges

Packet analysis covering DNS, TCP, TLS, SIP/RTP and evidence of retransmissions or degradation.

07

Scapy / tcpreplay

Build network scenarios

Scapy for packets and protocol scenarios; tcpreplay for replaying captures at a controlled rate.

08

iperf3

Measure capacity

Active TCP/UDP throughput, loss and jitter measurements as applicable, between observation points.

What AI and our expertise add.

  1. 01

    Select the right tests

    Use your architecture and objectives to choose the relevant tools, profiles and probes.

  2. 02

    Coordinate observations

    Plan internal and external checks, dependencies and test windows.

  3. 03

    Connect the evidence

    Compare findings, flag contradictions and separate alerts from confirmed observations.

  4. 04

    Prioritise and verify

    Produce contextual recommendations, then repeat the checks after remediation.

CENNTIR / SCRIPTS

Specialist scripts for real-world needs.

Our expertise informs the design of tailored scripts and scenarios: inventory, VLAN segmentation, SNMP checks, web exposure, VoIP diagnostics and audio/video load. Each scenario addresses a specific question, actionable evidence and a repeatable retest. Community libraries complement this tailored work.

Inventory & servicesVLANs & firewallsSNMP & devicesWeb & APIsSIP / RTP & QoSUDP / SRT & load

Project tool selection: Red connectors and native orchestration are being qualified. The tools, scripts and features available for your mission are confirmed during scoping. Names link to their respective projects.

Build my audit with these tools ↗

02 / TECHNICAL COVERAGE

Protocols. Checks. Answers.

Each domain connects a practical question to useful measurements and an actionable result. Tests are selected for your equipment, access permissions and qualified capabilities.

01

Hosts & servers

Is the service stopped, misrouted or filtered?

TCP / IPv4 / IPv6DNSInterfaces · routes

What we check

  • Read the host’s interfaces, routes, neighbours and DNS configuration.
  • Compare local services with ports reachable from another probe.
  • Correlate host load with degradation observed during a test.

What you receive

A contextual diagnosis identifying the host, network path or service to investigate.

Methods & availability Local diagnostics and targeted TCP checks exist; Red correlation needs qualification. Access follows granted permissions.

02

LAN & switching

Does your configuration actually carry the expected traffic?

802.1Q / VLANLLDP · STP · LAGPoE · ACL

What we check

  • Compare VLANs, PVIDs and trunks at both ends; inspect LAG and STP state.
  • Track changes in CRC/FCS errors, port drops and PoE budgets.
  • Cross-check LLDP neighbours, MAC tables, ACLs and return paths.

What you receive

A map of configuration discrepancies and links to prioritise for remediation.

Methods & availability Model-specific CLI/SSH and SNMP reads using an authorised account. An access port does not reveal every VLAN.

03

Web, APIs & exposure

Does your Internet exposure match what you intended?

HTTP / HTTPSTLS · DNSAPI · authentication

What we check

  • Inspect DNS, TLS certificates, service names and redirects.
  • Compare public access and authenticated journeys using test accounts.
  • Check access controls and document reproducible results.

What you receive

Evidence-backed exposure and access findings with targeted recommendations.

Methods & availability Targeted HTTP Basic checks exist; Red scenarios are in development. In-depth pentests use tools and analyst expertise, quoted separately.

04

SNMP & management

Which devices respond, and what do their counters tell you?

SNMPv2c / SNMPv3SSH · vendor APIOID · MIB

What we check

  • Read available identity, name, vendor object ID and uptime.
  • Inspect interface counters according to available OIDs and permissions.
  • Review the security level of SNMP access and management interfaces.

What you receive

A sourced inventory and management or port anomalies to address.

Methods & availability Native: SNMPv2c GET for four system fields. SNMPv3 and walks use qualified complementary tools.

05

Wi-Fi & mobility

Do quality and isolation follow your users?

802.11WPA2 / WPA3 · PMFSSID / BSSID

What we check

  • Observe available RSSI/SNR, channels and occupancy at measurement points.
  • Compare known access points, advertised security and guest-network isolation.
  • Measure roaming interruptions using a mobile client and a test voice stream.

What you receive

Locations and routes to investigate, with radio context and measurement limitations.

Methods & availability Red profile in development; radios and drivers need qualification. Coverage requires measurements on site.

06

VoIP & quality of service

Does voice remain stable when the network is busy?

SIP / TLSRTP / RTCPDSCP · RFC 6035

What we check

  • Measure loss, reordering, jitter and RTT in both directions.
  • Compare transmitted and received DSCP markings, idle and under bounded load.
  • Cross-check measurements with quality reports from compatible phones.

What you receive

An analysis of voice paths and network priorities, followed by a targeted retest.

Methods & availability SIP/RTP and RFC 6035 collection: Red integration needs qualification. Existing conversations are not monitored.

07

Audio over IP & AV

Can devices discover each other and stay synchronised?

Dante · AES67PTP · SDP / SAPmDNS / DNS-SD · multicast

What we check

  • Inspect mDNS/DNS-SD discovery and multicast reach across segments.
  • Check available PTP, SDP/SAP and QoS evidence for AES67.
  • Read Dante information through DDM/Director and compatible AV interfaces.

What you receive

Discovery, synchronisation or transport discrepancies traced to their sources.

Methods & availability Dante depends on compatible APIs and permissions; AES67 on measurement equipment. No universal compatibility claim.

08

Video & coordinated load

How much load can your path sustain reliably?

UDP / SRTSynthetic streamsQoS · coordinated probes

What we check

  • Prepare receivers before senders and establish an idle baseline.
  • Increase UDP/SRT streams in stages within agreed limits.
  • Compare reception, decoding errors and endpoint CPU/GPU load.

What you receive

An observed stable operating profile and the first limiting factors.

Methods & availability Automatia procedure tested on an identified bench; Red integration and each new setup need qualification.

03 / WE RUN THE MISSION

A focused audit. The right depth.

Prefer to hand the assessment to us? The first tier is designed for SME local networks. The second adds coordinated perspectives and deeper validation.

01 / SME Network Audit↗

Local network · fewer than 50 workstations

Understand your network and leave with clear, practical priorities.

FromXXX €excl. VAT
  • One site and a network scope agreed together
  • Inventory of devices and accessible services
  • Targeted segmentation, management access and SNMP checks
  • Technical report and prioritised remediation plan
  • Remote findings review with your team
Request my SME audit →
02 / Advanced Audit↗

Inside / outside · coordinated scenarios

Connect observations from multiple probes and test the paths that matter.

FromXXX €excl. VAT
  • An extended scope tailored to your objectives
  • Coordinated internal and external probes
  • Web, VoIP or video tests selected during scoping
  • Correlated evidence and detailed recommendations
  • One targeted retest within the agreed window
Scope my advanced audit →

Starting prices exclude VAT and are subject to a scoped quote. The SME plan targets fewer than 50 workstations; size, complexity and depth determine the final price. Hardware, shipping, travel and specialist work are quoted where required. A full application pentest is not automatically included. The 50-workstation threshold refers to workstations, not IP addresses: network and IoT devices are also scoped in the quote.

Need someone on site?

Cabling, radio measurements or hardware work: we assess local support based on the availability of a nearby specialist.

Discuss an on-site visit ↗

04 / FROM FIRST CONNECTION TO RETEST

The right probe. In the right place. For the right question.

01

Choose your approach

Run your audits with the platform or assign a mission to our team. We confirm the objective and the resources needed.

02

Position your probes

An agent on a server or VM, a device on the local network, an external point: the deployment follows the agreed scope.

03

Compare observations

Run the agreed scenarios. Measurements and evidence help distinguish a local issue from a network path or exposed service.

04

Remediate and verify

Prioritise actions, then repeat the selected checks. Keep the before-and-after results.

A probe on your premises, without a visit every time.

When a hardware probe is appropriate, we prepare its shipment and guide you through connection. After the mission, return it or retain it under the agreed subscription and terms.

  1. 01Preparation & shipping
  2. 02Guided connection
  3. 03Remote audit
  4. 04Return or retain

Answers before you begin.

What does the €XXX/month subscription include?+

The platform and the catalogue of available features in your plan, with one probe specified in the contract. Software or hardware deployment, prerequisites, hardware, shipping and any extra probes are agreed before commitment. The paid subscription has a minimum term of 12 months.

How does the 7-day free trial work?+

Request a trial and we check that your project is compatible before confirming activation. The seven days start at activation. The form triggers no payment; the subscription and its terms are confirmed separately.

Can you audit an SME local network from €XXX?+

Yes. The SME Network Audit is intended in particular for one site with fewer than 50 workstations, with inventory, targeted checks and a findings review. The final price depends on device count, complexity and agreed depth. Coordinated scenarios and a retest are part of the advanced audit.

Can Wi-Fi, VoIP and video testing be done remotely?+

VoIP and video tests can be controlled remotely with the necessary probes and permissions. Wi-Fi measurements require compatible radio hardware and appropriate placement on site. We consider an on-site visit when the assessment requires it.

Are all Red features already available?+

The probe foundation exists; new native Red features are in development and being qualified progressively. For each trial or mission, we confirm available capabilities, complementary tools and limitations. Website illustrations show scenarios, not real test results.

05 / YOUR NEXT OBSERVATION POINT

Start with a trial. Or a mission.

Tell us what you need. We will get in touch to prepare your probe, confirm suitable features and plan the next step.

XXX €excl. VAT / month
12-month minimum commitment

7-day trial after confirmed activation. Subscription: €XXX/month excluding VAT, with a 12-month minimum term. Terms and deployment are confirmed before subscription. The minimum subscription total is €XXX excluding VAT. This request triggers no automatic payment.

Contact ↗

Your details are used to handle this request. Do not include passwords or sensitive infrastructure data. Legal information

Legal information / Your details are used to handle this request

Your details are used to handle this request. Do not include passwords or sensitive infrastructure data. Controller: OHADJA, operator of CENNTIR. Used to handle your request and prepare a potential contract, without unrelated marketing. Access is restricted to the CENNTIR team; requests are retained for up to 90 days in this inbox. For access, correction or deletion, use our contact form. Contact