Network and wireless security check

How a network becomes a surveillance tool

A home or office network is the shared road all your devices use. Someone on it without permission may only see which devices are online and when; or they may exploit configuration mistakes to redirect traffic, reach smart devices, or leave a small device permanently connected. A wireless bug or hidden camera often uses your own network to get its data out.

That makes a network check a natural part of a full sweep. A wireless camera in a room shows up as a signal in the RF survey, and as an unidentified entry in the connected device list. Two methods confirm the same finding from different directions.

What we look for

• Rogue devices: anything connected that isn’t in the inventory, from a neighbour’s phone to a forgotten old device to a small computer plugged into a wall port.
• Fake access points: networks imitating your name to lure staff or family devices.
• Unauthorised access points: wireless units added to the corporate network, innocently or not, without IT’s knowledge.
• Configuration problems: remote admin left open, port forwards you didn’t create, altered DNS, default passwords and outdated firmware.
• Smart devices: the accounts and sharing settings behind cameras, speakers and doorbells.

How we work

First we list everything that should be on the network; without that, “unknown device” means nothing. Then we scan connected devices and match each one to the inventory. If something can’t be identified, we try to locate it physically by tracing which port, access point and room it connects through.

The wireless survey looks at surrounding networks for access points broadcasting your name or one very close to it. We review router and network device configuration with you, flagging settings exposed to remote access and changes made without your knowledge. Finally, the network cabinet, wall ports and under-desk connections are physically checked.

Before the check

• Don’t discuss it in the suspected space or on suspected devices.
• Contact us from another device, ideally over mobile data.
• Don’t change the router password or reset it beforehand; changing things before they’re examined erases findings.
• If you’ve seen an unknown device in a cabinet or socket, don’t touch or move it.

Limits

This is not a penetration test. Access within your ISP’s infrastructure or your cloud services is out of scope; for cloud account concerns, our phone and computer inspections are a better fit.

Report

You receive the device inventory, wireless findings and configuration issues in writing, with prioritised recommendations. Most of them, such as separating the guest network, changing default passwords and switching off remote admin, can be applied quickly by you or your IT team.