Security check
Open ports, exposed services, software versions, accounts and permissions on servers, cloud accounts and Microsoft 365 or Google Workspace. Written up as a ranked list.
Security and continuity
Security checks, hardening and backups that restore
We look at your servers, cloud accounts and office systems the way an attacker would start: from the outside, looking for the easy way in. You get a list of what we found, worst first, with what to do about each item. Then we can fix them, or you can.
Where we start
With the boring things, because that's where most break-ins begin. An old server nobody patched. An admin panel open to the whole internet. A password used in three places. A backup that turns out to be empty the day you need it. Fixing those first removes most of the risk for a fraction of the cost.
What's included
What we do
Hardening
Baselines for Linux, Windows, web servers and databases. SSH locked down, firewall rules tidied, networks split where it matters.
Keeping up with patches
Regular scans of what's exposed, a watch on vendor advisories, and a plan for software that's reaching end of life.
Logins and mail
Two-factor login for everyone, single sign-on where it fits, a review of who has admin rights, and SPF, DKIM and DMARC on every mail domain.
Backups and recovery
Three copies, one of them off-site and one that can't be altered. How much data you can afford to lose, per system, and a restore test to prove the numbers.
NIS2
Whether it applies to you (or to your customers, who may then ask you), what's missing, and the policies and evidence auditors and questionnaires ask for.
When something has happened
Containing it, finding out how they got in, getting back to normal, and closing the door afterwards.
What you have at the end
- A findings report, worst first
- Hardening baselines you can reuse
- A recovery plan with tested times
- Policies for audits and customer questionnaires
What we don't do
- Penetration tests without a signed scope and written permission
- Selling security software
Prices
What it costs
External security check
€1,490
Up to 10 public hosts or services. A ranked report and a call to go through it.
Microsoft 365 or Google Workspace review
€990
Tenant settings, accounts, sharing and mail security.
Mail authentication
€390 per domain
SPF, DKIM and DMARC all the way to p=reject, with four weeks of report monitoring.
NIS2 gap analysis
from €2,900
Does it apply, what's missing, and a plan to close the gaps.
Prices are without VAT. Anything else is quoted, or charged at €96.80 an hour. All prices.
Software
What we use for this
- Nmap
- Greenbone OpenVAS
- Wazuh
- CrowdSec
- ssh-audit
- OpenSSL
- restic
- BorgBackup
- Microsoft Entra ID
- Google Workspace
Questions
Things people ask
- Is this a penetration test?
- No. A check is done with your cooperation and looks at configuration. A penetration test is a separate job with a signed scope and written permission.
- Does NIS2 apply to us?
- It depends on your sector and size, and on whether your customers fall under it and pass the requirements down to their suppliers. That's the first thing we look at.
- Can you help if we've already been hit?
- Yes. Get in touch straight away. Managed clients have an agreed way to reach us.
Articles
If you want the detail
Managed servers
Locking down SSH on a server that faces the internet
regreSSHion and Terrapin were reminders that SSH needs looking after like anything else. The baseline we put on every server: patches first, keys only, no root login, a short list of who may log in, and an audit we can repeat.
E-commerce platforms
Why your order confirmations end up in spam
When order mail lands in the spam folder, it's nearly always a setup problem. How SPF, DKIM and DMARC work together, what "alignment" means, and how to get from p=none to p=reject without losing mail on the way.
Security & continuity
Your backup job says OK. That doesn't mean you can restore
A backup job that finishes without errors tells you something was copied. Whether you can get a working system back, and how long it takes, you only find out by restoring it. Here's how we do that, and what we write down each time.
Got something that needs looking after?
Tell us what you have and what's bothering you. You'll hear back within one working day, usually with a few questions before any price.