48h Assessment
Cybersecurity Assessment
Most attacks on small and mid-sized businesses aren't sophisticated — they exploit what's been forgotten: a misconfigured email record, a reused password, a port left open for years. This assessment maps, in 48 hours, everything an attacker would see of your company from the internet.
How they get in
Four paths account for the large majority of intrusions we see in SMEs.
Phishing
An email imitates a supplier or a colleague and gets someone to type their password into a fake site or open an attachment.
Warning signs:Emails with unusual urgency, senders that look similar but not identical, links that don't add up.
Ransomware
Once inside, the attacker encrypts your files and demands a ransom. Without tested backups, the business stops.
Warning signs:Files that stop opening, strange extensions, a ransom note on the desktop.
Leaked credentials
Passwords leaked from other services are tried against yours. Without MFA, one reused password is the key to the house.
Warning signs:Logins from odd locations, access alerts, email accounts sending spam.
Exposed services
A server, panel or VPN reachable from the internet and left unpatched is found by automated scanning and exploited.
Warning signs:Services nobody knows are published, software months behind on updates.
What we check in 48 hours
An automated process, reviewed by hand, ending in a security index with prioritised recommendations.
- Domain, SSL/TLS and DNS hygiene
- SPF, DKIM and DMARC — who can send email in your name
- Public exposure: ports, panels and visible services
- Technologies in use and known vulnerabilities
- MFA, password management and ransomware risk
- A security index with a priority-ordered action plan
Want to know where you're exposed?
We talk to you, run the assessment and explain the result without jargon.