- Home
- Security
Security health checks, Cyber Essentials and penetration testing
Most small business breaches start with something ordinary: an old account still live, a shared password, no two-factor login, a backup nobody tested. We find those gaps and close them, in plain English.
Security health check
A practical review of the things that actually get small businesses into trouble. You get a written report with fixes in priority order, and we can make the fixes for you.
Accounts and access
Who can log in to what, admin rights, ex-staff accounts, shared passwords and two-factor login across email, files and key apps.
Microsoft 365 or Google Workspace settings, plus the records that stop people sending email pretending to be you.
Backups
What is backed up, where, how often, and whether a restore actually works.
Cloud and internet exposure
Cloud permissions, open storage, and anything visible from the internet that shouldn't be.
Devices
Laptops and phones: updates, disk encryption, screen locks and what happens when one is lost.
People and process
How payments are approved, how new starters and leavers are handled, and simple training on phishing.
Cyber Essentials and ISO 27001
Cyber Essentials is the UK government-backed scheme that many supply chains and public sector contracts now ask for. We get you ready, fix what needs fixing and take you through the assessment. For clients outside the UK, or larger customers who ask for it, we can prepare you for ISO 27001, the international security standard.
Penetration testing
Penetration tests are carried out by accredited testing partners, which is what insurers and larger customers usually expect. We scope the test so you only pay for what matters, manage it, explain the findings in plain English and fix them.
Why it pays
Security work rarely feels urgent until it is. A health check now is cheaper than a week of disruption, a chargeback, or losing a contract because a customer's security questionnaire came back badly.
Want to know where you stand?
Book a free 30 minute call. No slides, no hard sell. If we can't help, we'll say so.