Map
We talk about how the business sells, serves customers and operates. Then we list which systems, clouds and access exist, and which are critical to revenue.
You know what will happen, when, and what it costs before we start. And your business keeps running throughout.
We talk about how the business sells, serves customers and operates. Then we list which systems, clouds and access exist, and which are critical to revenue.
With written authorization, we simulate real attacks and review configurations. Tests are scheduled with you so they don't disrupt sales or staff.
We fix what threatens the business most, first. We can make the fixes, support your IT team or vendor, then retest.
Timelines vary with the size of the environment. This is an example for a mid-sized business with an online store, an ERP and one main cloud.
30 minutes to understand the business and its concerns. Free.
Scope, timeline and price fixed in writing, together with the testing authorization.
Work coordinated with your team, at times that don't get in the way of sales.
One meeting with leadership and one with IT. Each in its own language.
Follow-up on fixes and confirmation that they worked.
It depends on the size of the environment and what makes sense to test. After the first conversation, you get a fixed-price proposal. No hourly billing and no surprises at the end. Many businesses start with a smaller assessment and expand later.
A typical assessment takes two to four weeks, from first contact to results presentation. Larger or multi-cloud projects can take longer. The timeline is set in the proposal.
That's not the goal, and we plan so it doesn't happen. More sensitive tests run outside peak hours, with an agreed emergency contact. If something looks risky, we stop and check with you before continuing.
Yes. We work with them, not instead of them. An outside view finds what people in the day-to-day don't have time to see, and your team gets a detailed technical plan to act on.
We sign a confidentiality agreement before starting. We access only what's necessary, read-only where possible, and evidence is deleted at the end of the project as agreed.
You keep the report, the plan and the retest of fixes. If you'd like, we can set up periodic reviews, for example every six months or before major changes.
The first conversation is free and already gives you a clear idea of where to start.