Security baseline
A structured review of where you are exposed and a baseline configuration checklist you can act on. A consultancy review — not penetration testing.
What you receive
Pure consultancy: the engagement ends with documents your team can actually use — implementation is always quoted separately.
Weakness review
Identity, email, endpoints, backups and access — reviewed against practice we see working at similar businesses.
Baseline checklist
The configuration changes that close the most common gaps, ordered by impact and effort.
Prioritised action list
What to fix this month, this quarter and this year — sized so the first steps happen without a project.
Scope, stated plainly
These boundaries are fixed for every client. If a piece of work falls outside them, you get a separate quote — not a surprise invoice.
Included
- Remote review sessions with your team
- Written weakness summary
- Baseline configuration checklist
- Prioritised action list
- A walkthrough call to go through it all
Not included
- Penetration testing or red teaming
- Formal certification — we prepare you for audits such as Cyber Essentials, we do not certify
- 24/7 monitoring (see the advisory retainer)
A fixed price, agreed before we start
The review is priced by the size and complexity of your estate and agreed in writing up front. There are no follow-on fees unless you ask for further work.
Request a quoteNot sure where you are exposed?
The review gives you a written, prioritised answer — and tells you just as clearly what you do not need to worry about.