Security Snapshot
Would you know if you were already exposed?
Most owners cannot answer that, because nobody has ever looked. A Security Snapshot checks the six areas that actually get businesses breached and tells you, in plain English, where you stand and what to fix first.
- 48 hrs Report delivered
- 30 min Of your time
- $0 Ongoing commitment
- 100% Australian owned
- Network Firewall firmware 3 years old Action needed
- Microsoft 365 MFA missing on 4 accounts Worth attention
- Email and domain DMARC not enforced Action needed
- Endpoints 11 patches outstanding Worth attention
- Website No exposed services found All clear
- Dark web 2 staff logins in breach data Action needed
The reality
Nobody attacks you because you are interesting.
They attack you because it is automated, and because a small business is the one least likely to notice. The cost is not theoretical either.
-
$56,600
Average cost of a cybercrime report for an Australian small business
-
6 min
How often a cybercrime is reported to the ASD, around the clock
-
+14%
Rise in that average small business cost in a single year
Source: Australian Signals Directorate, Annual Cyber Threat Report 2024-25.
What we check
Six areas. One report you can act on.
Every one of these answers a question you cannot answer today, and each is checked with the tools an attacker would use rather than a questionnaire.
-
01
Network vulnerability scan
Open ports, unknown devices on your network, ageing firmware and misconfigured rules, scanned with the same tools an attacker would use.
Answers What is reachable, and what is running that nobody remembers installing.
-
02
Microsoft 365 security review
Your Secure Score, multi factor coverage, how many accounts hold admin rights, mail forwarding rules and licence usage.
Answers Whether someone with your password could simply log in.
-
03
Email and domain health
SPF, DKIM and DMARC records checked and verified, along with your mail routing and your domain against known breach data.
Answers Whether a stranger can send email that looks exactly like yours.
-
04
Endpoint health check
Every device assessed for outstanding patches, antivirus status, disk encryption, drive health and local admin exposure.
Answers Which machine is the way in.
-
05
External domain and website
Your public facing domain and site scanned for certificate problems, exposed services, missing security headers and known vulnerabilities.
Answers Exactly what an attacker sees before they have touched anything.
-
06
Dark web credential monitoring
Breach databases searched for credentials tied to your domain, so you know which staff passwords are already circulating.
Answers Whether your logins are already for sale.
How it works
Three steps, and about 30 minutes of your time.
-
1
A short onboarding call
We take temporary access and put a lightweight scanning agent on one device. That is the whole setup, and we do it with you on the call.
-
2
We run the assessment
The checks run remotely over the next 24 to 48 hours. Nobody comes on site, and your staff carry on without noticing anything.
-
3
You get the report
A colour coded report in plain English, walked through with you on a call, with the findings ranked by what to fix first. The agent comes off afterwards.
Is this for you
Built for businesses without an IT person.
Made for Gold Coast and Brisbane businesses that run on Microsoft 365 and have nobody whose job it is to check any of this. If none of the list on the right sounds like you, you probably do not need it, and we would rather say so.
- You use Microsoft 365 for email and files
- You have no internal IT person
- You are not certain your backups would actually restore
- You have never had a professional security assessment
- You want to know where you stand, not sit through a pitch
Pricing
$297
inc GST
One off. No lock in, no ongoing commitment, and no obligation to use us for the fixes. The report is yours either way, and it is written so any competent provider can act on it.
Everything included
- Full network vulnerability scan
- Microsoft 365 security review
- Email and domain health check
- Endpoint health assessment
- External domain and website audit
- Dark web credential monitoring
- Written report with traffic light ratings
- A walkthrough call, with what to fix first
Questions before you book
Do you need to come on site?
No. The whole assessment runs remotely. We need temporary access to your Microsoft 365 admin centre and a lightweight scanning agent on one device, and we walk you through both on the first call.
How long does it take?
About 30 minutes of your time in total, split across two short calls. Everything else happens in the background, and the report is with you inside 48 hours.
Will this disrupt my team?
No. The scans run quietly in the background and nobody will notice them. The scanning agent is removed once the assessment is finished.
What happens after I get the report?
That is up to you. We walk you through the findings and what we would fix first. If you want us to do the fixing, that can be a one off project or an ongoing agreement. If you want to take the report elsewhere, it is yours and it is written so anyone can act on it.
What if everything comes back clean?
Then you have paid $297 to stop wondering, and you will know exactly what you are doing right and what to keep an eye on. That is a fair outcome, and it is the one we would rather deliver.
Is my data safe during the assessment?
The access we take is temporary and removed when the work is done, the agent is uninstalled, and the findings go to you and nobody else. Anything we hold is handled under the Privacy Act 1988 and the Notifiable Data Breaches scheme.
Book it
Find out where you actually stand.
Pick a time that suits. We take it from there, and your report is with you inside 48 hours.
- Price
- $297 inc GST
- Your time
- About 30 minutes, in total
- After that
- No lock in, no obligation
Would rather talk first? Ring 1300 025 110.