How is this different from the free check?

The free check reads your domain's public records from the outside, in seconds, and public records are all it can see. The audit goes behind them: email, backups, accounts and the website itself, with your permission first and a written report at the end that prices each risk.

Do you need my passwords?

No. Access is agreed system by system before I look at anything, read-only wherever the system allows it, and you are welcome to sit in while I work. If a check would need more access than you are comfortable giving, it is skipped and the report says so.

How long does it take?

Most of the elapsed time is agreeing access, not the audit itself. Once access is agreed you get a real date for the report, not a vague one. I will not promise same-day, because thorough beats fast in this job.

Security

Find the weak spots before someone else does

I look at your business the way an attacker would: website, email, backups, accounts and what is already public. You get a report that puts a price on every risk, in plain English.

Cost: £199 one-offincluding VAT
On a care plan: Included
Passwords needed: None

Run the free check first

What gets checked

Five places, one honest question at each: if someone wanted to hurt this business, where would they start?

Your website: the software it runs on, its certificate, and how you sign into it
Your email, and whether a criminal could send messages that look like yours
Your backups: whether they exist, where they live, and whether they would restore
Your accounts: who can get into what, and what one leaked password would unlock
Your public footprint: what is already visible about your business, because that is the first thing an attacker reads

What you get

One document, written for the person who owns the risk, not for an IT department.

A plain-English report you can read in one sitting. Every warning states what is wrong, how urgent it is, and what ignoring it would cost you in pounds, downtime or reputation - the same style as the free scan report.

No pressure attached

Fixes are quoted separately, and nothing in the report obliges you to buy them from me. Hand it to another provider, work through it yourself, or file it for later. The report is yours either way.

Bidding for councils, schools or bigger contracts? This doubles as preparation for Cyber Essentials, so the groundwork is done before the questionnaire arrives.

Do you even need the audit yet?

The free check

Reads your domain's public records from the outside, in seconds, with no sign-up, and grades your email protection in plain English. Run it today; it costs nothing.

The full audit

Goes deeper than public records can reach: into email, backups, accounts and the website itself, with access agreed first. The check is the starting gun, not the race.

Common questions

How is this different from the free check?: The free check reads your domain's public records from the outside, in seconds, and public records are all it can see. The audit goes behind them: email, backups, accounts and the website itself, with your permission first and a written report at the end that prices each risk.
Do you need my passwords?: No. Access is agreed system by system before I look at anything, read-only wherever the system allows it, and you are welcome to sit in while I work. If a check would need more access than you are comfortable giving, it is skipped and the report says so.
How long does it take?: Most of the elapsed time is agreeing access, not the audit itself. Once access is agreed you get a real date for the report, not a vague one. I will not promise same-day, because thorough beats fast in this job.

See what an attacker sees. It takes seconds.

Run the free check on your domain first: no sign-up, no obligation. If it flags something, the audit picks up where the public records stop.

Run the free check Book the audit