Protect · Cybersecurity
Find the security gaps, then close them
You cannot fix what you cannot see. We review how your accounts, devices, email, network, cloud services and applications are set up, explain the risks in plain language, then help you fix the ones that matter most.
The problem we solve
Most breaches use ordinary weaknesses
Attackers rarely need anything clever. Reused passwords without multi-factor sign-in, unpatched devices, forgotten remote access, email anyone can spoof and untested backups do the job for them.
An assessment finds those weaknesses before someone else does, and hardening closes them in a sensible order.
What you get
What we look at
Identity and access
Sign-in security, admin accounts, shared logins, and how quickly leavers lose access.
Devices and patching
Operating systems, updates, endpoint protection, disk encryption and unsupported equipment.
Email security
SPF, DKIM and DMARC, filtering, forwarding rules and the settings that stop others impersonating your domain.
Network and remote access
Firewalls, Wi-Fi, exposed services and remote access tools, checked from inside and outside.
Microsoft 365 and Google Workspace
Sharing settings, admin roles, audit logs and the security features you already pay for.
Websites and applications
Common weaknesses such as broken access control and injection, with fixes your developers can apply.
What you receive
A report you can act on
No hundred-page printout of scanner output. You get a short, prioritised report written for decision-makers, with the technical detail for whoever does the fixing.
- An executive summary of your main risks, in plain language
- Prioritised findings, rated by likelihood and impact
- A fix plan: quick wins for this week, projects for the quarter
- A retest to confirm the important fixes worked
How it works
How an assessment runs
Scope and authorise
We agree in writing what is in scope, when testing happens and who to contact.
Assess
Interviews, configuration reviews and technical tests, scheduled to avoid disruption.
Report
A walkthrough of the findings with your team and a prioritised plan.
Harden
We fix what you ask us to, or support your team while they do, then retest.
We only test systems you own or are authorised to test, under a written agreement. An assessment reduces risk; no assessment can prove a system has no weaknesses.
Questions
Frequently asked questions
What is the difference between an assessment and a penetration test?
An assessment reviews how everything is set up and finds the common weaknesses across your organisation. A penetration test simulates an attacker against specific systems. Most organisations get more value from an assessment first; we recommend a focused test where it makes sense.
Will testing disrupt our systems?
We schedule tests away from busy periods and agree in advance anything that carries risk. Most of the work is reviewing settings, which has no effect on users.
How often should we have one?
Once a year is a sensible baseline, plus after major changes such as a new system, an office move or an incident.
Can you help us meet a regulator’s or client’s requirements?
Yes. We can map findings to the framework you are asked about, such as the Central Bank of Nigeria’s cybersecurity requirements for financial institutions or ISO/IEC 27001 controls, and help you close the gaps. We do not issue certifications.
Related services
Often paired with
Tell us what you need
Share a few details and we will reply by email with questions, next steps and, where it helps, a short call.