This is where we do active and passive reconnaissance both internally and externally on your network to identify vulnerabilities. This type of assessment is more suitable for most SMBs than a full pentest (and is far less expensive).