All services Security Health Check
Know where you stand in two weeks, for a fixed price.
We check the five things attackers try first, explain what we find in plain language, and hand you a short list of fixes in order. No surprises, no open-ended bill.
Fixed pricequoted up front on a 15-minute call
- 01Internet exposureRemote Desktop (RDP) reachable from the internetHigh
- 02Email and domainDMARC set to monitor only: your domain can be spoofedMedium
- 03Microsoft 3656 of 41 accounts without multi-factor authenticationHigh
- 04Leaked passwords3 staff accounts found in infostealer logsHigh
- 05The basicsBackups never testedMedium
First fix: turn on multi-factor authentication for the 6 remaining accounts (about an hour).
- No hourly surprisesOne price for the whole scope, agreed before we start.
- About two weeksFrom kickoff to your report and walkthrough.
- Up to about 50 staffOne main domain and one Microsoft 365 or Google Workspace.
- No disruptionRead-only access and non-intrusive checks. Nothing is broken into.
What we check
- Internet exposureEverything you have facing the internet: websites, subdomains, VPN and remote access, open services. We flag what is outdated, misconfigured or not needed.
- Email and domainWhether someone can send email pretending to be you (SPF, DKIM, DMARC), and how well your mail is protected in transit.
- Microsoft 365 or Google WorkspaceAccounts without MFA, admin rights that shouldn't be there, old sign-in methods, mailboxes forwarding outside, files shared publicly.
- Leaked passwordsStaff accounts showing up in breach data or infostealer logs. We report the accounts, never the passwords.
- The basicsA one-hour conversation on backups, patching, antivirus, admin accounts and incident readiness, measured against the Canadian Centre for Cyber Security's baseline controls for small and medium organizations.
What you get
- A one-page summaryWhere you stand, in plain language. Clear enough to share with leadership, your insurer or a client asking about your security.
- The full findingsEach issue with its evidence, its risk and how to fix it.
- Your top 10 fixes, walked throughRanked by impact and effort, then reviewed with you in a 60-minute call.
How it works
- Short call15 minutes to confirm the scope and answer your questions. We send a one-page authorization to sign.
- AccessYou create a read-only account in Microsoft 365 or Google Workspace and pick a time for the one-hour interview.
- The checksAbout three days of senior work. If we find something urgent, you hear about it right away, not in the report.
- Report and walkthroughYour report within two weeks of kickoff, followed by a 60-minute call.
When it makes sense
- Your cyber insurance renewal is comingKnow your answers before the questionnaire, and fix the gaps that push premiums up.
- A client sent you a security questionnaireGet a documented baseline to point to, and the fixes that unblock the deal.
- You've never had an outside checkA low-risk first look before investing in a full penetration test or a security program.
Not included
- Penetration testing or any attempt to break in
- On-site scanning of your internal network
- Web application testing
- Fixing the issues (we can quote it separately)
A head start on what's next
Book a penetration test, remediation work or a virtual CISO engagement within 60 days of your report, and you get 10% off it, up to the cost of your Health Check.
Common questions
What access do you need?
A read-only account in Microsoft 365 or Google Workspace, your main domain, and one hour with someone who knows your IT. No passwords to your systems, no software to install.
Will it disrupt anything?
No. The checks are read-only and non-intrusive, and we agree on timing in advance.
Is this a penetration test?
No. A penetration test tries to break in and goes much deeper. The Health Check is a fixed-price first look; if it shows you need a test, you get 10% off it when booked within 60 days.
What if you find something serious?
We tell you the same day, with what to do, instead of waiting for the report.
We have more than 50 people.
Get in touch. On the first call we'll tell you whether the Health Check fits, or what would.
The sample summary on this page uses synthetic data.
Book a Health Check
Tell us what's going on. The expert who would lead the work replies within 1–2 business days, in English or French.