For businesses with up to 100 people. We look at the things that matter most to your insurer, your customers, and your ability to recover, confirm what is working, and give you a short plan for the rest. About four hours of your time, no new tools, and done alongside the IT provider you already have.
How it works
About 30 plain-language questions, roughly 30 minutes, save and resume. Things like "are critical updates applied within two weeks?" and "have we ever restored from backup?"
Multi-factor sign-in status, backup test records, an update report, and your last insurance application. Whatever is missing is simply noted.
Sixty minutes with you and your IT contact to walk through anything that does not line up, and anything nobody has checked.
Your Security Health Report, an insurance-readiness summary, and a 90-day action plan for your provider.
What you get
A one-page summary of what is working, what is not, and what nobody has checked yet. Each item shows the evidence, who owns it, and when to look again. It is the page your broker, your customers, and your next IT provider will ask for. See a sample.
Your answers to the questions cyber insurers actually ask, with the proof beside each one. Attach it to your next application or renewal.
A short, prioritized list of fixes written for the people who will do the work, with a clear "done" for each item. We never recommend specific products.
A fixed fee, quoted in writing after a 15-minute call, based on your size and how many systems are involved. It does not change once we start, and there is nothing to buy afterward.
We do not resell products, pay or accept referral fees, or take ongoing access to your systems. If your IT provider referred you, the plan is still written for you first. The report is yours.
Questions
A 15-minute call to confirm the fit and put a fixed fee in writing. Then a kickoff within a few business days: you get the questionnaire and your IT provider gets a short list of reports to send. Your joint call is in week two, and your report arrives by day 14.
You and whoever runs your technology, whether that is an in-house generalist or your managed service provider. If your provider cannot join, we proceed with you.
Most Health Check clients have not. That is fine. Anything that cannot be checked is recorded as not yet checked, which is often the most useful line in the report.
No. The Health Check uses reports you share and a conversation. We do not take ongoing access to your email, accounts, or cloud services.
Yes. Optional quarterly check-ins update the report before each renewal or customer questionnaire.
Enough time to confirm the fit, agree the fee in writing, and schedule your two weeks.