Take control of your security with a clear, guided plan

Our audit gives you a complete review of your cybersecurity including your cloud accounts, email settings, devices, access controls, and past breach exposure. We look at how your systems are configured, where risks exist, and which issues matter most for your business.

‍

You’ll receive a clear, prioritised action plan that shows what to address first, along with a guided walkthrough of your results.

We look at the key systems, accounts, and settings your business relies on every day. This includes:

‍

• Your business website
  We check whether it’s set up securely, using safe connections, and not exposing anything publicly that shouldn’t be.
• Your email security and delivery settings
  We make sure your email is properly protected against impersonation and spoofing, and that messages are set up to reach inboxes reliably.
• Your domain name and DNS settings
  We check how your domain name is registered, whether it’s protected, and whether the technical records behind it are set up safely.
• Your main cloud platforms
  This includes tools like Microsoft 365 or Google Workspace. We review user accounts, admin access, sharing settings, login security, and anything that could allow unauthorised access.
• Your cloud-based business apps that store important data
  We focus on tools that hold sensitive or business-critical information, such as accounting systems like Xero, file storage tools like Dropbox or Google Drive, and other platforms where important data lives. We review who has access, how securely it’s shared, and whether login protection is strong.
• Your laptops, desktops, and other devices
  We look at whether they’re protected with encryption, up-to-date software, basic security settings, and other essentials that keep attackers out.
• Exposure from past data breaches
  We check if any of your email addresses or accounts appear in known data leaks, which may put your business at risk.
• Public file-sharing risks
  We look for documents or folders that may be accidentally shared with “anyone with the link” or publicly accessible online.
• Connected apps and integrations
  We review apps connected to your main platforms to see if any have more access than they need or are no longer in use.
• Inactive or leftover accounts
  We check for accounts belonging to former staff, contractors, or old tools that may still have access to your systems without you realising.

‍

If you use additional tools or industry-specific systems, we can include those in your review as well.

The audit tells you what needs to be fixed, why it matters, and guidance on what the outcome should be, but it doesn’t include detailed implementation steps.

‍

Many small businesses prefer to make the improvements themselves, while others choose to use our optional Security Foundations service, where we work with you to implement the recommended changes. Either way, you’ll know exactly what needs to be done.

You can absolutely handle the fixes yourself. The audit is designed to make your priorities clear and achievable, even without a security background.

‍

If you’d like support, our Security Foundations service provides hands-on help to implement the recommendations and set up stronger security foundations.

You can schedule your audit for a time that suits you. Once it begins, most audits are completed within a few business days. After the review is finished, we’ll book your guided walkthrough so you can go through the results and next steps with full clarity.

No. The audit is designed to be completely non-disruptive. We don’t make changes to your systems, and we don’t need to run anything that affects your day-to-day operations.

‍

For parts of the audit that require visibility into your settings, we review them together during a short screen-sharing session. You stay in full control of what’s shown, and nothing is changed on your side.

‍

Everything else is handled separately by our team in the background, so your work can continue uninterrupted.

We’ve designed the process to be quick, simple, and easy for small teams. Here’s how it works:

‍

1. A short, 5-minute questionnaire
   We start with a few quick questions about your systems, how your team works, and what is most important to your business. This helps us tailor the audit to your business from the start.
2. A 15-minute clarification call
   We confirm your answers, discuss any areas you want us to prioritise, and outline what we’ll review. No technical preparation is needed.
3. Configuration review via secure screen-share
   Instead of asking for admin access or new accounts, we guide you through a short screen-share session so we can review key settings together. You stay fully in control of what’s shown, and it avoids any disruption to your systems.
4. We complete the rest of the security review
   Once we’ve gathered what we need, our team checks your cloud accounts, email setup, devices, website, domain settings, and business apps. Most audits are completed within a few business days, and this part is completely hands-off for you.
5. You receive your prioritised findings
   Your results are presented in a clear, easy-to-understand report that highlights your biggest risks, what matters most, and what to tackle first.
6. A guided walkthrough of your results
   We take you through the findings step by step, explain why each issue matters, and answer any questions so you can move forward with confidence.
7. Optional help with implementation
   You can make the improvements yourself, or choose our Security Foundations service if you’d like hands-on support putting the recommendations in place.

Yes. The audit is designed for small businesses of any size, including sole traders and teams without technical expertise.

‍

You’ll get clear guidance that makes sense for your scale, your tools, and your day-to-day work.

Every business is different, so your audit focuses on the systems you use, how your team works, and the risks most relevant to your environment.

‍

There are no generic checklists. Your recommendations reflect your context, your setup, and your security goals.

Once the audit is complete, you’ll receive a clear, prioritised report that shows your biggest risks and what to focus on first. We then take you through a guided review, where we walk through the findings together, explain why each issue matters, and answer any questions you have.

‍

After that, you can:

‍

• Make the improvements yourself, using the priorities outlined in your report, or
• Choose our optional Security Foundations service if you’d like hands-on support with implementing the recommendations.

‍

Either way, you’ll finish with a clear understanding of your security position and a practical plan to strengthen it.

‍

In most cases, you won’t need to create new accounts or grant full administrator access. For many parts of the audit, we can review your configuration together during a short screen-sharing session, where you stay in full control and we guide you through what to open.

‍

For areas where we don’t need sensitive information, you can provide temporary or limited access if you prefer, but this is entirely optional.

‍

Our goal is to keep the process simple, secure, and convenient. You choose the approach that works best for you, and we make sure everything is reviewed without disrupting your day-to-day work.