Security Health Check
Your weak spots found, and ranked by what to fix first.
- How long1 to 2 weeks
- How we workFixed package
What you receive
In one or two weeks you know where you are exposed, how serious each gap is and exactly what to fix first.
What can an attacker see?
You receiveA scan of what is exposed to the internet
You see your business the way an attacker would.
What it is. A scan of everything of yours that can be reached from the internet.
Why it matters. You see your business the way an attacker would.
Are our doors locked?
You receiveA review of gateways, databases and storage
These are the places data leaks from most often.
What it is. Checks on your gateways, databases and file storage, and how they are protected.
Why it matters. These are the places data leaks from most often.
Who has the keys?
You receiveA review of secrets and access
Old accounts and leaked keys are found and closed.
What it is. A look at passwords, keys and who has access to what.
Why it matters. Old accounts and leaked keys are found and closed.
Would our backups actually work?
You receiveA backup restore test
Many backups fail on the day they are needed.
What it is. We restore from a real backup to prove it works.
Why it matters. Many backups fail on the day they are needed. Now you know yours.
What did you find?
You receiveA findings report
Owners and boards can understand it, not just engineers.
What it is. Every finding, explained in plain English, with how serious it is.
Why it matters. Owners and boards can understand it, not just engineers.
What do we fix first?
You receiveA prioritised fix list
You close the biggest gaps first.
What it is. The fixes in order of risk and effort.
Why it matters. You close the biggest gaps first.
How close are we to Cyber Essentials?
You receiveCyber Essentials gap notes
A clear path to a certificate many customers and contracts ask for.
What it is. Notes on what stands between you and Cyber Essentials certification.
Why it matters. A clear path to a certificate many customers and contracts ask for.
From brief to done
- 1
Days 1 to 5
Scan and review
Exposure, systems, secrets and backups checked.
- 2
Days 6 to 10
Report
Findings, fix list and Cyber Essentials notes, walked through with you.
What can a stranger see about our systems?
Outside-in security look. What anyone on the internet can see about your systems, and the five fixes that matter most.
- You give us written permission and the addresses to check
- We check certificates, email settings and anything exposed, from the outside only
- A short report with the fixes in order
- It is free. There is nothing to pay and nothing to sign.
- The report is yours to keep and share, whatever you decide.
- No sales call unless you ask for one.
Questions people ask
How much does it cost?
We send a written quote after your request: what it covers and what it does not. The tier, scope and timing set the price.
Could I just use AI for this?
AI drafts code and prototypes quickly, and we use it every day. It cannot decide what to build, prove that it is secure, or answer for it when real people rely on it. That is the part you are hiring us for.
Who owns the work?
You do. Code, designs, files and documents are yours, and the quote says so in writing.
Can we change the scope?
Yes. If something needs adding or removing, we agree it in writing before we do it.
What happens after?
Most people go on to Hardening Sprint, but there is no obligation. You keep everything we made.