Security and IT assessment
A plain-language check of how exposed your business is.
We look at the places small businesses are usually caught out: sign-ins, email, backups, websites and who has admin access. You get a written report with the fixes in priority order.
Take the free AI risk checkAsk for a quoteWhat’s included
What the assessment covers.
- Sign-ins: two-factor or passkeys, shared accounts, and accounts left behind by former staff
- Email: SPF, DKIM and DMARC, so others cannot easily send mail as your domain
- Backups: what is backed up, where the copies live, and whether a restore has ever been tested
- Websites and hosting: updates, exposed admin pages and certificates
- Admin access: who can change what in your main business apps
- A written report organized against CIS Controls v8 Implementation Group 1, the set written for small organizations
- A walk-through of the report with you, in plain language
Security assessment
Fixed quote
The price depends on how many people, systems and sites are in scope. You approve the quote before we start.
Ask for a quoteHow it works
From first call to a fix list.
- Tell us what you runUse the intake to list your main apps, email provider and websites.
- Get a fixed quoteOne price for the whole assessment, agreed before we start.
- We assessMostly read-only checks and a conversation with you. Anything that could affect a live system is scheduled with you first.
- Report and walk-throughYou get the report and we go through it together. Fixes are quoted separately.
Questions
Asked before starting.
Can we fix our email records ourselves?
Often, yes. Our free guide to SPF, DKIM and DMARC walks through it step by step. The assessment checks the result along with everything else.
What is CIS Controls IG1?
A free, prioritized list of security basics from the Center for Internet Security, written for small organizations. Our plain-English guide explains each control.
Is this a penetration test?
No. It is a review of settings and practices, not an attempt to break in. If a contract or insurer asks for a penetration test, we will say so and help you scope one.
Will it disrupt our work?
No. Most checks are read-only. Anything that could touch a live system is scheduled with you.
Will it help with a cyber insurance questionnaire?
The report covers the topics those questionnaires ask about, such as two-factor sign-in, backups, email security and admin access, so you can answer from what we found instead of guessing. Our free guide explains what each of those questions is checking.