We review one application or cloud environment and show you the risks that matter most. You get a short list of fixes in priority order and a walkthrough. It costs nothing.
- Summary
- Fix first
- Findings
- What we checked
- What we couldn't check
- Next step
System reviewed
Customer portal
Three issues need attention. One is urgent.
- 1Close the admin panel to the internetUrgent
- 2Replace the API key found in a public code repositoryHigh
- 3Turn on two-step login for admin accountsMedium
Walkthrough booked · Thursday 10:00
- Price · USD
Free$0 · No charge
You don't have to buy anything afterwards.
- Term
One review
With a walkthrough of the results
- Monitoring
Not included
The audit is a one-off review
- Best for
Teams deciding where to start
Free assessment
How it works
Four steps, at no cost.
Here's what happens between your first message and the walkthrough.
Tell us what you run.
Send a few lines about the system and the decision in front of you. Keep passwords and secrets out of the form.
It takes a few minutes.
- Request receivedCustomer portal · ready for a large customer?Now
- Free scope agreedOne application · evidence shared safelyNext
- Safe reviewInternet exposure · architecture · your evidenceNext
- WalkthroughReport sent · call with your teamNext
What you get
A short report your team can act on.
Plain language for the people who decide, and enough detail for the people who fix.
A short risk summary in plain language
What we found and why it matters, on a page your leaders can read.
Findings in priority order
Each finding says how serious it is and why. We also list what we couldn't check.
The first fixes to make
Start with the fixes that remove the most risk. We suggest a next step only if you need one.
Scope
What the audit covers, and what it doesn't.
For teams with one application or cloud environment and a clear question. We confirm scope and timing before we start.
Included
- One application or one cloud environment
- A look at your architecture notes, key dependencies and the security evidence you already have
- A safe check of what you expose to the internet, and of common gaps in your controls
- One walkthrough of the findings, with a plan in priority order
Not included
- This is a first look. We don't exploit anything, run a full penetration test or read every line of code.
- Logged-in testing, active testing and fixing need a separate scope and your written permission.
- The audit is free. You don't have to buy anything afterwards.
- Ongoing monitoring is not included.
What we need from you
- 01A few lines on the system and the decision you face
- 02The application or cloud environment you want us to review
- 03An architecture overview and any evidence you can share, with secrets removed
Questions about the free audit.
Is the audit really free?
Yes. It costs $0, and you don't have to buy anything afterwards.
What will you look at?
One application or one cloud environment. We use your architecture notes, any redacted evidence and what is visible from the internet.
Will you try to break in?
No. The audit is a safe first review. Active testing needs its own scope and your written permission.
Can it support an investment decision?
It can raise the right questions. For a full deal review, use Technical Due Diligence, from $5,000 per engagement.
How long does it take?
It depends on what you can share with us. We agree the timing when we confirm the free scope.
What happens after the walkthrough?
You decide. If you want more help, we suggest the program that fits. You don't have to buy anything.
Technical Audit · Free
See where you stand, at no cost.
Tell us what you run and what you need to know. We confirm the free scope before we ask for any evidence.