Security Health Check
A review of the systems you run on, where your client information goes, and who can reach it. You get written findings and a fix list in the order worth doing.
Most weak spots are ordinary, and nobody has looked
What catches small businesses out is rarely exotic. An account that still works months after someone left. A shared folder open wider than anyone realized. A supplier holding more access than the job needs. None of it shows up on its own, because none of it stops anything from working.
This is the look nobody has got round to. We go through the systems your business actually runs on, work out where your client information ends up and who can reach it, and write up what we find in plain English, ordered by what is worth fixing first. Then we walk you through it on a call, so the report is not the last you hear of it.
This is also the groundwork behind our package builds. Before an agent touches your systems, it helps to know what is already exposed, which is why assessment work and AI work usually run together rather than in sequence.
From $1,800 About 1 to 2 weeks, including a walkthrough call of the findings.What to expect
The systems you run on
We go through the accounts, devices and services the business actually uses, and check how they are set up rather than assuming.
Your cloud setup
Microsoft 365, Google Workspace, AWS or Azure, whichever you use. We tell you what is worth tightening and what is fine as it is.
Who can log in to what
Access is where most of the surprises are: old accounts still working, shared logins, and people holding permissions they stopped needing a year ago.
A fix list in priority order
Written findings in plain English, ordered by what matters, plus a walkthrough call so you know what each one actually means for you.
This is sold on its own, and it also sits behind every fixed-price package: the same person doing this work is the one building your automation.
It is worth being clear about what this is not. It is a review, so what you get is findings and a fix list you can act on. We do not try to break into your systems, we do not run practice emergencies with your leadership team, and we do not watch anything around the clock or take on-call work. If a penetration test is what you actually need, say so on the call and we will point you at someone who does them properly.