Know where you stand
before an attacker does.
A structured, remote review of your entire environment — delivered as a written report with prioritized recommendations you can act on immediately.
Completed remotely in 3–5 business days. No agents installed. No disruption to your team.
Common reasons businesses book an assessment
Coverage
What the assessment covers
Every layer of your environment — not just your firewall.
User & Account Security
All user accounts, privilege levels, MFA status, inactive accounts, shared credentials, and password policies.
Device & Endpoint Posture
Managed and unmanaged devices, patch levels, endpoint protection, encryption status, and configuration baselines.
Microsoft 365 Configuration
MFA, conditional access, mailbox security, audit logging, anti-phishing settings, and admin account hardening.
Network & Firewall Review
Firewall rules, remote access configuration, segmentation, VPN posture, and wireless security review.
Backup & Recovery Posture
Backup coverage, frequency, recovery objectives, offsite storage, immutability, and ransomware resilience.
Cloud Environment Review
Security review of cloud-hosted workloads, access controls, storage permissions, and external connectivity.
How It Works
The assessment process
Five steps from booking to debrief. Straightforward, structured, and documented.
Scoping Call
A 30-minute call to understand your environment — size, stack, cloud services, and what you are most concerned about. This scopes the review so nothing gets missed.
Remote Review
We work remotely, reviewing your environment across all six coverage areas. No disruptive on-site visits. Most reviews are completed within 3–5 business days of access being granted.
Findings & Analysis
Every finding is documented, categorized by severity, and mapped to a practical remediation action. Findings are specific to your environment — not a generic checklist.
Written Report
You receive a structured written report: executive summary, full findings by coverage area, severity ratings, and a prioritized remediation roadmap sorted by business impact.
Debrief Call
We walk through the report together so you understand every finding, the remediation steps, and what to tackle first. You leave with a clear action plan — not just a document.
Deliverable
A written report you can use
Every assessment produces a structured written report — not a spreadsheet of raw scan output. Written for the business owner and IT lead, with context, severity ratings, and clear next steps.
The report is followed by a debrief call where we walk through findings together, answer questions, and agree on priorities.
Report includes
- Executive summary — overall posture and key risk areas
- Findings by coverage area with severity ratings (Critical / High / Medium / Low)
- Prioritized remediation roadmap sorted by business impact
- Microsoft 365 configuration checklist
- Backup posture review and recovery gap analysis
- Quick wins — items that can be resolved within 30 days
Preparing for cyber insurance?
Our assessment report is structured to address the controls insurers commonly require — MFA, endpoint protection, backup posture, and documented incident response. Many clients use the report directly as supporting documentation for their renewal application.
Ready to see where your gaps are?
Book a consultation and we will scope a review that fits your environment and timeline.
Book a Security Assessment