Independent telephony security
Every call depends on a secure system.
Specialist PBX, SIP and VoIP security assessments for UK organisations. Understand your exposure. Find the weaknesses. Know what to fix first.
Written authorisation. Agreed scope. Findings reviewed by a person.
The overlooked layer
Your phones deserve the same scrutiny as your network.
A reachable administration page. An old extension. A dialling rule that allows more than it should. Small omissions in a phone system can create a route to unauthorised access and fraudulent call charges.
GoldAgent reviews the telephony layer in detail: exposure, authentication, configuration and calling controls. Every finding is checked, evidenced and ordered by risk, so your technical team has a practical plan.
Our specialism
A considered assessment. A clear next step.
Choose a focused review, a wider assessment or scheduled assurance as your phone estate changes.
- 01
PBX Security Assessment
An authorised, end-to-end assessment of the PBX systems your business runs on.
- 02
VoIP Security Assessment
An attack-surface review of your VoIP platform, endpoints and remote users.
- 03
SIP Security Audit
A focused review of SIP trunks, registration and authentication.
- 04
Toll-Fraud Risk Assessment
Find the exposure that lets attackers turn your phone system into call spend.
- 05
Continuous Assurance
Scheduled, automated reassessment with historical change tracking that keeps your exposure picture current between assessments.
- 06
VoIP Penetration Testing
Authorised, manually validated penetration testing of your VoIP and SIP telephony, not an automated scan.
The work, made useful
Evidence your team can act on.
A report should help someone make a decision. Ours brings the business impact and technical detail together, with a clear route from finding to fix.
The sample is illustrative and contains no customer data.
- 01
Understand the exposure
An executive summary and an inventory of the services examined.
- 02
Review the evidence
Validated findings with severity, technical context and supporting evidence.
- 03
Put the fixes in order
Prioritised remediation guidance and a defined route to retesting.
Working together
Careful work, from the first conversation.
01
Scope
We agree the systems, purpose, permissions and testing window before active work begins.
02
Assess
We review the agreed environment and validate findings with service availability in mind.
03
Explain
You receive the evidence, business context and practical remediation priorities.
04
Revisit
Agree a retest, or use Assure for scheduled checks and a record of what has changed.
For organisations that depend on every call.
Questions, answered
Before we begin.
Straight answers about scope, permissions, pricing and what you receive.
What does GoldAgent do?
GoldAgent assesses the security of PBX, SIP and VoIP phone systems for UK organisations. We identify weaknesses, validate findings and explain what to fix first.
What is included in a PBX security assessment?
The agreed scope can cover exposed services, administration access, authentication, firmware, extensions, outbound dialling and toll-fraud controls. You receive evidence and prioritised remediation guidance.
Can you assess a live phone system?
Yes, subject to an agreed scope and testing window. We plan around service availability, agree an emergency-stop contact and obtain approval before higher-impact tests.
Do you need permission before testing?
Yes. Active testing requires written authorisation from the system owner or someone with the right to grant it. Hosted providers may also need to give consent.
What does the free exposure check involve?
It is a review of public data about your UK organisation’s phone-system exposure. We do not log in, probe or send traffic to the phone system. It is not a full security assessment.
How much does an assessment cost?
Assess starts from £800 and Assure from £1,290 a year. Prices are indicative; the final quote depends on the agreed scope. Our pricing page explains the available options.
Do you work with MSPs and telecom providers?
Yes. We offer partner and white-label engagements by agreement, with scope, reporting and customer communication agreed before work starts.
How is ongoing assurance different?
Assure repeats agreed checks on a schedule and compares results over time. A person validates findings in each cycle, so your team can see new, resolved and unchanged issues.
Start with a conversation about your phone system.
Tell us what you run and what concerns you. We will help you define the right scope and a sensible next step.
Testing is only performed against systems you own or are explicitly authorised to test.