Security assessment
Sometimes you just want an expert to tell you where you really stand, without signing up to a retainer. Our consultancy is a one-off engagement that gives you a clear, honest picture of your cybersecurity and a practical plan to improve it, all in plain English.
- 1Turn on MFA for all admin accountsACT-01This weekReady to start
- 2Patch every device within 14 daysACT-02This monthIn progress
- 3Test a restore from backupACT-03This quarterNot started
Priced per engagement, one-off, fixed quote agreed up front
At a glance
Free security check
Start with our free online security check. A few plain-English questions, then a tailored snapshot of your biggest risks, no cost, no obligation, no jargon. It is the easiest way to see where your business stands today.In-depth assessment
When you want to go deeper, we carry out a full hands-on assessment, reviewing your systems, data, people and processes the way an attacker would, and mapping your real-world risks and compliance needs across the whole business.Recommended actions
You get a prioritised, plain-English roadmap: the quick wins to do this week, and the bigger moves to plan for. Practical steps you can act on yourself, or have us handle with you.An honest picture, and a plan you can act on.
Engagements start priced per engagement, and we agree a fixed quote before any work begins. No retainer, no lock-in. You tell us what you are worried about, we scope the work to fit, and you get a report a business owner can read and act on.
We also get you certification-ready against the five Cyber Essentials controls and guide you through the questionnaire. The certificate itself is issued through an accredited certification body, and we make sure you are ready to pass. If your people are the gap, our education and training sessions pick up where the assessment leaves off.
An assessment is the best first step into everything else we do. Many businesses follow it with training to close the human gaps, bring in a vCISO to keep the plan on track, or choose SecureCore for ongoing, managed protection once they know exactly what they need. There is no pressure either way, the goal is simply for your business to be safer.
With consultancy, you can:
- See where you really stand, in plain English
- Know what is exposed and what to fix first
- Prove your security to clients, insurers and tenders
- Find out how far you are from Cyber Essentials, control by control
- Spend on IT where the risk actually is
- Agree a fixed quote before any work begins
What happens, step by step.
- 1Turn on MFA for all admin accountsACT-01This weekReady to start
- 2Patch every device within 14 daysACT-02This monthIn progress
- 3Test a restore from backupACT-03This quarterNot started
Built for owners who want a straight answer.
Owners who want an expert view
You know security matters but not where you stand. You want someone to look properly, tell you the truth and give you a plan, without a monthly commitment.Firms being asked to prove it
A client, insurer or tender wants evidence of your security. An independent assessment gives you an honest answer and the roadmap to close the gaps.Businesses heading for Cyber Essentials
You want to know how far you are from certification-ready before committing to the questionnaire. The assessment tells you, control by control.Anyone about to spend on IT
You are about to buy new systems, move to the cloud or change supplier. A review first means the money goes where the risk actually is.One-off, fixed quote, no retainer.
What it costs
Priced per engagementone-off, fixed quote agreed up frontScoped to the size of your business.Included
- Free security check to start
- Hands-on review of systems, data, people and process
- Written report with prioritised, plain-English actions
- Walkthrough call to explain the findings
- Cyber Essentials readiness guidance
Not included
- Carrying out the fixes (quoted separately, or done with you)
- Ongoing monitoring or a retained lead (see vCISO)
- Penetration testing beyond the agreed scope
“Every engagement ends with something you can act on, in plain English, at the price we agreed before we started.”
Related services.
Cyber Essentials Readiness Sprint
A sprint with a fixed quote that takes you from where you are to certification-ready against the five Cyber Essentials controls, with the evidence and the questionnaire done. The certificate itself is issued by an accredited certification body.Priced per engagementSafe AI use
Your staff are probably already using ChatGPT, Copilot or Gemini. We find out how, fix the settings that leak data, write simple rules everyone can follow, and show your team what is safe to put in and what is not.Priced per engagementPenetration testing
A CREST-accredited partner tests your external systems, web applications or internal network the way an attacker would. We scope it, manage it and turn the findings into a plan you can act on.Priced per engagement · with a partnerCompliance support
A gap analysis against the framework you are being measured against, right-sized policies and registers, and hands-on support through the audit. Certification is carried out by an accredited certification body.Priced per engagement
Tell us what you need. A person replies, usually the same day.
Or email [email protected].