Vulnerability assessment.
You cannot fix a weakness you have not found. We scan your network, devices, cloud accounts and websites for known vulnerabilities, sort the results by real risk and help you close them.
What’s included.
What we check
- Everything of yours that faces the internet
- Servers, PCs and network devices inside the office
- Cloud and Microsoft 365 settings
- Websites and web applications
What you get
- Findings ranked by risk, not by count
- A plain-language summary for managers
- The technical detail your IT people need
- A fix list, with the effort each item takes
Afterwards
- Help fixing what was found
- A rescan to prove each fix worked
- Scans on a schedule, so new weaknesses are caught
- Evidence for insurers, auditors and tenders
In detail.
Assessment or penetration test?
A vulnerability assessment finds and ranks the known weaknesses across everything you run. A penetration test goes further: a tester tries to break in through them, by hand. Most businesses should start with an assessment and fix what it finds. If a contract or a standard calls for a penetration test, we will tell you, and an assessment first makes that test shorter and more useful.
How it works.
-
Scope
We agree what is in, what is out and when the scans may run.
-
Scan
Scans run in the agreed window, set so they do not disrupt work.
-
Report
You get the findings in order of risk, with the fix for each.
-
Retest
After the fixes we scan again and show what has closed.
Further reading
- lesson Intermediate 3 min read What is a CVE? A CVE is the public reference number for one security vulnerability. Who assigns them, how to read one, and what a severity score adds.
- lesson Intermediate 3 min read What is a zero-day vulnerability? A zero-day is a software weakness that attackers can use before a fix exists. What that means for a business, and what protects you meanwhile.
- lesson Beginner 3 min read What is a software vulnerability? A vulnerability is a weakness in software that an attacker can use. Where they come from, how a patch closes one, and how fast to install it.
Related
- Essential Eight The Australian Signals Directorate’s eight strategies, assessed, put in place and kept in place.
- Firewall & Network Security Firewalls, network segmentation and secure remote access, with web application, DDoS and bot protection.
- Threat Detection and Monitoring A round-the-clock watch on sign-ins, devices and networks, with alerts someone acts on.
Tell us what needs sorting.
Book a call or send an email. We reply within one business day.