Our audits review configurations, accounts, patch levels, backups and policies against recognised frameworks. You receive a prioritised list of findings in plain language.
We look at the areas where small businesses are most often caught out: old accounts that were never disabled, admin rights handed out too widely, missing multi-factor authentication, untested backups and exposed services.
We can fix the findings for you and re-test to confirm, and the report gives you honest answers for insurance and client security questionnaires.
Vulnerability scanning
Automated scans of devices, servers and cloud.
Account review
Old, shared and over-privileged accounts found and fixed.
Policy review
Passwords, access and data handling checked against best practice.
Backup verification
Proof that backups exist and can actually be restored.
Prioritised remediation
The riskiest issues fixed first.
Re-testing
Fixes confirmed with a follow-up scan.
Signs you need this
- You've never had an independent look at your IT security
- Your cyber insurance renewal asks detailed security questions
- A client requires evidence of your security controls
- Staff have left and you're not sure their access was removed
How we deliver it
Scope
We agree what's in scope: devices, servers, cloud, network and policies.
Assess
Scans, configuration reviews and interviews with key staff.
Report
A plain-language report with findings ranked by risk.
Remediate
We fix the findings you approve and re-test to confirm.
Deliverables
- Vulnerability scan results
- Account and access review
- Prioritised findings report in plain language
- Remediation plan with effort estimates
- Follow-up scan confirming fixes
Tools we work with
- Vulnerability scanners
- Microsoft Secure Score
- Microsoft Defender
- CIS Benchmarks
Common questions
How long does an audit take?
For a typical small or mid-sized business, a few days of assessment followed by a report review meeting. We confirm timing once the scope is agreed.
Will the audit disrupt our work?
No. Scans run in the background or after hours, and staff interviews are short and scheduled in advance.
Do we have to use you to fix the findings?
No. The report is yours. Many clients ask us to remediate, but you can hand it to your own team or another provider.
Ready for IT you don't have to think about?
Book a free consultation. We'll review your setup and give you a clear, fixed monthly price.