Evidence packSample
MFA export[VALUE?]
Admin list[VALUE?]
Restore result[TIME?]
Inventory snapshot[DATE?]
Incident response card1 page
Change logstarted
Evidence pack
In your account, not ours. Dated, and readable by a broker.
Offering 01
Harder to rob, more from what you pay for, and proof your broker can read.
About 5 weeks
Fixed, quoted after your free Exposure Scan
Evidence a broker can read
Your cyber insurance renews soon and you're not sure how to answer the questionnaire.
Someone almost paid a fake invoice, or a mailbox got taken over.
A customer, general contractor or bank wants proof you take security seriously.
You pay for backups, but nobody has ever tried a restore.
A fixed-fee engagement, about five weeks. We look at how your business actually runs, from email and logins to how bills get paid, and rank what's most likely to cost you money. Then we prove the riskiest gaps on your own systems: a timed restore, a payment-change callback, a one-hour practice drill. Along the way, we match your monthly bills to what you actually use.
It's not a penetration test. Nobody tries to break in. It's not a tool sale: we don't resell software or take a cut of licenses, so we make nothing when you buy something. And it doesn't replace your IT provider. We work beside them, in the systems they already run.
The assessment builds the plan and proves it. The program runs it. Three quarterly reviews and an insurance prep call before your renewal are included. If you want help with the fixes, that's a separate fixed-scope project, and your assessment fee is credited toward it.
Phase 04 is where the risk stops being a theory. Nothing changes in your systems until you sign off at a gate.
A timed restore test with your IT or backup vendor, an invoice-change callback walkthrough, and a 60-minute incident tabletop.
60 minutes for the tabletop, and your backup vendor on the call for the restore.
A dated restore result, a tested payment-change rule, and an incident card your office can follow.
The restore succeeds inside the time we agreed, or you get a clear fix list for why it didn't.
Security Program Assessment
The readout is the first plan. From there the program keeps turning: put in place, adopt, run, review, integrate — and your three quarterly reviews happen at Review.
All of it stored in your own account. These are drawn samples with placeholder values, not screenshots of a real client.
In your account, not ours. Dated, and readable by a broker.
Modest, mid and premium. Each step has an owner and a date, starting with what you already pay for.
What you pay, what's unused or duplicated, what can be switched on or cancelled.
Before and after, what was proven, what's left. Broker invited if you want.
No internal score appears on any deliverable. Controls are scored behind the scenes; you see plain words, ranked fixes and dated proof.
Owner time: about 1 hour a week, plus 2 hours of overhead. About 7 hours over the five weeks.
We never ask for passwords.
Read-only access, granted by your admin, time-boxed and removed at readout unless you keep us on.
Every engagement reads your monthly technology bills and tags each line. We make no money when you buy a tool, so the first place we look for budget is the money you already spend.
Amounts and tool names here are placeholders. This is the shape of the one-page spend summary, drawn, not a real client’s bill.
Fixed fee, quoted after your free Exposure Scan
The number depends on how many people, places and systems are in scope, and we don't know that before the scan. So the scan is free and the fee is fixed once we do.
What it replaces: buying a tool, setting it up once, and finding out at renewal — or after an incident — that nobody kept it current.
The engagement, then the reviews that are already included.
Vertical on mobile, same order. The renewal month you give us on the scan form is what schedules the last one.
Sold now, started only when you say so. The assessment stands on its own.
Fixed scope, drawn straight from the 30/60/90 plan you signed.
Evidence refresh, annual review and restore test, admin and connected-app watch.
The assessment fee is credited toward remediation.
Thinking about AI as well? Security comes first — here's why →
No. A penetration test pays someone to break in. We check how your business runs day to day, then test what matters most: can you restore, can a fake invoice get paid, does your team know who to call.
No. We work beside them. They keep your computers running; we own the plan and the proof. We'll ask them to help with the restore test, and we never recommend a second copy of something they already run well.
We can't promise coverage or a price. Only your insurer decides that. What you get is evidence your broker can read, an insurance prep call before renewal, and clear answers for the questionnaire.
Usually not. Your fix plan starts with what you already pay for. If something new is needed, we write the requirement and you pick the product. We don't resell software, so we make nothing either way.
About seven hours of your time over five weeks. Short interviews with three to five people, your monthly technology bills, an admin to grant read-only access, and a one-hour practice drill. Never passwords.
Not us. We're not an emergency response team. Part of the engagement is naming who you call, in writing, and putting it on an incident card your team keeps.
Free · one front door
Start with the free Exposure Scan. Answer plain questions online and see where you stand right away, or book a 20-minute call. No email needed to see results.
About a dozen plain questions, one per screen. You see your result per area as Ready, Close or Gap. No email needed.
Skip the questions and talk it through instead. We’ll set a time around your jobs.
Book the callWe’ll reply to set a time.