Services

Everything here is security only. We find and explain the risks, and your IT provider fixes them. Pricing depends on the size of your team, so you'll get a clear quote after your free Quick Check.

Human Risk

  • In-person security awareness training

    Live, on-site sessions built around the scams your staff actually see, from fake invoices to gift-card requests.

  • AI awareness training

    How to use AI tools without leaking client data, and how to spot AI-powered scams like voice cloning and deepfakes.

  • Phishing simulations

    Safe practice emails that show who is likely to click, with a quick lesson in the moment instead of blame. Included in plans.

Technical exposure

  • Email domain check

    Can someone send email pretending to be you? We check your SPF, DKIM, and DMARC records and explain what to change.

  • Dark web credential check

    Find out whether staff logins tied to your business show up in known breach data.

  • External vulnerability scan

    What your business looks like from the internet, including open doors that should be closed.

  • Internal authenticated scan

    A deeper look at the computers and servers inside your network for missing updates and weak settings.

  • Microsoft 365 / Google Workspace review

    A read-only review of the settings that protect your email, files, and accounts.

Governance & documentation

  • Cyber risk assessment

    Where you are exposed, what it could cost you, and what to fix first, ranked in plain English.

  • Written security program (WISP)

    Your written security plan, built for your business. Tax preparers and auto dealers, among others, are required to have one under the FTC Safeguards Rule.

  • Cyber insurance readiness review

    Get ready for the security questions on your cyber insurance application before renewal time.

AI

  • AI awareness training

    Safe, practical AI use for everyone on staff. Also listed under Human risk.

  • AI acceptable-use policy

    Clear rules for which AI tools staff can use, and what data can and cannot go into them.

  • Shadow AI inventory

    Find out which AI tools are already in use around your office, approved or not.

Plans

  • Tier 1: Aware

    Train your people and watch for leaked passwords. Includes annual in-person and AI awareness training, quarterly phishing simulations, monthly dark web monitoring, and an annual email domain check.

  • Tier 2: Assured

    Everything in Aware, plus scanning and the paperwork. Adds monthly phishing simulations, twice-yearly vulnerability scans and Microsoft 365 / Google reviews, an annual risk assessment, and a written security program.

  • Tier 3: Complete

    Everything in Assured, plus AI governance and insurance readiness. Adds quarterly external scans, a cyber insurance readiness review, an AI acceptable-use policy, and an annual shadow AI inventory.

One-time projects

  • Exposure Check

    A one-time technical snapshot of where you are open to attack. Includes an external vulnerability scan, internal authenticated scan, Microsoft 365 / Google review, and email domain check.

  • AI Readiness

    Everything you need to use AI safely, in one project. Includes AI awareness training, an AI acceptable-use policy, and a shadow AI inventory.

Common questions

Not sure where to start? Start free.

The Quick Check shows where you stand today, and we'll recommend what fits from there.