Assessment Highlights
Why our scan is different
Safe external checks
before any deeper testing
Prioritized risk summary
not a vague score
Senior engineer review
every report is reviewed before delivery
Free assessment for GTA businesses
Find the security gaps attackers see first.
Get a no-cost external security assessment for your business domain, email posture, web exposure, and practical next steps before small issues become urgent incidents.
Want part of it right now? Check whether anyone can send email as your domain — no signup, results in seconds.
Assessment Scope
What your free assessment includes
The assessment focuses on common internet-visible risks that affect small business trust, email deliverability, insurance readiness, and incident exposure.
External Surface Review
Public-facing endpoints and domain records checked for common security gaps without intrusive penetration testing.
TLS & Certificate Checks
HTTPS behavior, certificate validity windows, and protocol-level hardening signals visible from the public internet.
Security Header Baseline
High-impact HTTP security headers and practical improvements that reduce browser-side attack exposure.
DNS & Email Baseline
Foundational DNS, MX, SPF, DKIM, and DMARC signals that affect resilience, spoofing risk, and trust.
Who This Is For
The offices we usually help
- Professional offices with 5 to 50 employees
- Law firms, accounting firms, medical clinics, and engineering companies
- Businesses reviewing cyber insurance requirements
- Companies switching IT providers or reviewing current security posture
Scope-safe checks only. Internal network testing is only performed with explicit scoped authorization.
The Process
What happens after your assessment
Step 1
Book
Reach out. We confirm scope and authorization within 1 business day.
Step 2
Assess
A senior engineer reviews public exposure, domain health, mail trust, and security signals.
Step 3
Report
You receive a clear risk summary with quick wins and higher-priority remediation items.
Step 4
Decide
No pressure. You choose whether to fix internally, use your current IT team, or ask us to help.
Ready to see what attackers see?
Email us your business domain and a senior engineer will confirm scope and follow up with your summary.
no commitmentfollow-up within 1 business daysenior engineer on the call
FAQ
Common questions about the free security assessment
What we check from outside your network, what we do not touch, and what the report contains.
6 results
CoverageIs this a penetration test?
No. It is a passive external review — domain records, DNS, TLS and certificates, HTTP security headers, and email authentication. Nothing intrusive is run against your systems. Internal network testing only happens under a separate, explicitly scoped authorization.
OnboardingWhat do you need from us to start?
Your business domain name and confirmation that you are authorized to request the review. Everything in the assessment is visible from the public internet, so no system access or agent install is required.
CoverageHow is this different from a free online scanner?
A scanner returns a score. A senior engineer reads these results before delivery and writes what each finding means for your business, which ones matter first, and what a realistic fix looks like — including the ones a tool would flag that you can safely ignore.
CoverageWill this tell us if we passed our cyber insurance questionnaire?
Not on its own. It covers the externally visible portion — email authentication and exposed services — which is where questionnaires often catch offices out. Controls like MFA coverage, backup testing, and endpoint protection need the fuller readiness review.
CoverageHow long until we get the results?
We confirm scope within one business day and follow up with the written summary after the review. If something genuinely urgent turns up — an exposed service or a mail domain anyone can spoof — we tell you as soon as we see it rather than waiting for the report.
CoverageWhat happens if you find something serious?
You get the finding, the practical fix, and the priority. There is no pressure to hire us — most items can be fixed by your own team or your current provider, and the report is written so they can act on it directly.