Most business owners would not. We will check for free and tell you what we find in plain English.
Free, and no obligation.
These are the things business owners tell us before we start.
"Someone left last year and I honestly could not tell you whether their access was ever turned off."
"I heard about a business that paid an invoice to the wrong bank account. It was for eighty grand."
"A client sent us a security questionnaire and I had to guess at half the answers."
"We pay for IT support every month. I have no idea if any of this is covered."
"Half my team is using their own laptops and phones. I have never thought about it until now."
"If something went wrong tomorrow, I would not know where to start."
Nobody is going to tell you that you have been careless, because you have not been.
When you set up Microsoft 365, a long list of protections came switched off. Not broken. Just off, waiting for someone to turn them on. Microsoft leaves that to you.
Most businesses never do it, because it is nobody's job. Your IT support fixes what breaks. Nothing breaks when a protection is off, so nobody looks at it. Years go by.
The only real mistake is not knowing. Finding out is the easy part.
A 25 person accounting firm in Sydney. They had IT support. They had never had a problem.
If one person's account had been broken into, the intruder could have set it to secretly copy every message out of the business. No warning. Nobody would have been told. This is exactly how invoices get paid into the wrong bank account.
Their accounts were never switched off. Same passwords as the day they walked out.
Devices nobody had used in months, still able to reach company files.
Two of their three email addresses had no protection against this. A scammer could email their clients, as them, asking to be paid.
If that password had ever appeared in a leak, that was the whole front door.
The "quick favour, can you transfer this today" email would have landed like any other.
Nineteen problems in total. Every one of them a setting that had been sitting switched off since the day they started.
Same business. Same team. Nothing bought, nothing replaced, nobody retrained.
Where your business actually stands, in words you can repeat to someone else.
What to sort out first, second and third. Not thirty things. The ones that matter.
A written report you can forward to your partners, your board or whoever looks after your IT.
You either find out you are fine, or you find out early enough to do something about it.
One screen, about ten minutes. If your IT provider handles that side, forward it to them.
Runs quietly in the background. Nobody in your team will notice a thing.
You get the written report, then we spend 20 minutes on a call going through what we found and what it means for you.
No. We look at your settings, not your messages. We are not opening your inbox, your documents or your files, and we could not tell you what is in any of them. You will see a list of exactly what we are looking at before you approve anything.
Not at all. Nothing changes, nothing gets switched off, nobody has to log in again. It runs in the background and your staff will not know it happened.
That is rather the point. You do not need to. We do the looking, then explain what we found the way we would explain it to a mate over coffee. If we use a word you do not know, we have done our job badly.
It should not be. Most businesses we do this for have an IT provider and we are not asking you to change that. Think of it as a second set of eyes. If they have it covered, you will have proof, and you can send them the report either way.
Because the checking part is automatic and costs us almost nothing. Some businesses read what we find and ask us to sort it out, which is where we make our money. Plenty take the report to whoever already looks after them, and that is completely fine by us.
We tell you what we would recommend doing about it, and what that would cost. Every business is different, so the price depends on how much is out of place. You will have the recommendation and the costing in front of you before anything happens, and nothing goes ahead unless you approve it. Saying no thanks and keeping the report is a perfectly good outcome too.
This is the one we hear most, and it is the one that costs people. Almost none of this is personal. It is automated, sweeping around looking for whoever left the door open. Being small does not hide you. It just means nobody has checked.
You switch off our access whenever you like, in a couple of clicks. It is your account and it stays entirely in your hands.
Ten minutes to set up, then a 20 minute call. The report is yours to keep.
Free, and no obligation.
