Small Business Security Assessment

A ten-person business has exactly the household's problem with a payroll attached — and often with a customer list, a bank account and a legal obligation to protect other people's data. It is also too small for the vendors who sell to enterprises, and too busy to work this out from first principles.

The assessment looks at what you actually run: the accounts everyone shares, the laptop with the accounts package on it, the backup that has never been tested, the email system that is one convincing message away from a wire transfer. Findings come back ranked by consequence, in language that does not need a security background to act on.

There is no product to buy at the end. Where something is needed, we will say what and why, and name the free option where one exists. If a customer or an insurer has sent you a questionnaire, bring it — the report is shaped to answer it.

Prices reflect the time these engagements normally take. Where a service is priced by size, pick the tier matching whichever part of the description is larger for you — a small house with a great many devices belongs in the higher tier. If what we find on the day goes beyond the tier you picked, we will tell you before starting and agree any additional time with you first. We never bill for extra time you have not agreed to.

How it works

1. How the business works

   Who does what, on which systems, from where. Half of security is knowing what you have, and most small organizations have never written it down.

2. The review

   Devices, accounts, network, backups, cloud services and the habits that connect them — on site where the equipment is, remote for the parts that live in the cloud.

3. The report

   Findings in order of consequence, each with a plain-English explanation and a specific next step. Yours to act on, or to hand to whoever does your IT.

Often added to this

When we confirm the details by email, mention any of these — or we will suggest one if it fits — and it goes on the same invoice as the main work.

• Extra time

  $150/hour

  When what we find goes past what was booked. Always agreed with you before it starts, never billed afterwards as a surprise.

• Follow-up check

  $150

  A remote session a month or two later to confirm what was set up is still in place, updates are landing, and nothing new has crept in.

• Staff briefing

  $225

  Thirty to forty-five minutes with your people at the end of a visit: what changed, what they need to do differently, and the scams aimed at businesses like yours.

• Questionnaire answers

  $225

  A customer, insurer or bank has sent a security questionnaire. We answer it accurately from what we found, in the words they are expecting.

The full list of add-ons