Security and systems review
Know what you run, who controls it, and what is exposed.
Most small businesses run on a dozen connected tools that nobody has looked at together. We map them, check each one, and give you a ranked list of fixes in plain English.
What we check
Six places problems hide.
We run these checks on our own domains and fix what they find.
- 01
Domains and DNS
Who actually owns your domain, where it renews, and whether its records still point where you think. A domain in a former employee’s name is a risk nobody sees until it lapses.
- 02
Email
Whether your mail passes SPF, DKIM and DMARC, so it lands in inboxes and nobody else can send as you.
- 03
Accounts and access
Who has admin on what, which logins still belong to people who left, and where two-factor sign-in is missing.
- 04
Websites and apps
Security headers, outdated plugins, exposed files and keys, and anything a public scanner would find first.
- 05
Integrations
Which tools are connected to which, what data moves between them, and which API keys and webhooks are still live.
- 06
Backups and recovery
Whether there is a backup, whether it restores, and how long you would be down if something failed today.
How it works
Nothing changes until you have read the list.
- Step 1
We map it
Every domain, mailbox, account, site and connected tool, written down in one place, often for the first time.
- Step 2
We check it
Read-only. Nothing changes during the review, and nothing is attacked.
- Step 3
You get the list
Plain-English findings ranked by risk, each with what is wrong, the fix, and how long the fix takes.
- Step 4
We fix what you approve
One at a time, each one reversible, and verified after.
Not sure what you are running?
That is the usual starting point. Fifteen minutes is enough to scope a review.