How small businesses actually get hit
Not by targeted attackers. By automated scanning that finds remote desktop open to the internet, or a password that leaked from an unrelated site years ago and still works, or an email account with no second factor.
Those are the first things we look at, because they account for most of what we get called out to clean up.
What you get
A ranked list: what would most likely be used against you, what it would cost you if it were, and what closing it involves. Written so an owner can read it and act.
The items you can fix yourself, at no cost, come first with instructions. We would rather you close three holes this week for free than buy a project.
What we actually do
Remote access
What is reachable from the internet, and whether it should be. This is the single most common way in.
Accounts and passwords
Shared logins, accounts belonging to people who left, and credentials already in public breach data.
Multi-factor coverage
Where it is on, where it is off, and where it is off on the account that matters most, which is usually email.
Backups actually tested
Not whether a job reports success. Whether a restore works, and whether ransomware could reach the copies.
Endpoints
What is installed, what is out of support, and what is quietly not updating any more.
Vendors and access
Who else can get into your systems, what they can reach, and whether that access was ever removed.
Frequently asked
Is this a penetration test?
No. A pen test tries to break in and is the right tool once the basics are closed. Most small businesses have not closed the basics, so a pen test just produces an expensive report saying so.
Will you try to sell me products?
The list includes what costs nothing, what costs a little, and what costs real money, in that order. Plenty of the highest-value fixes are configuration changes in software you already pay for.
Do I need this if we are small?
Automated attacks do not check your size first. Small businesses get hit constantly precisely because the basics are open. That said, if we look and you are in decent shape, we will tell you that and charge you for the look, not a project.
Do you handle compliance requirements?
We can tell you where you stand against common frameworks, but if you are under a specific regulatory obligation you need somebody who specializes in it. We will say so rather than pretend.
What does it cost and how long?
A flat fee depending on how many machines and locations, usually a few days including the write-up. You get the document whether or not you hire us to fix anything.
Serving the Coastal Bend
Alice, Corpus Christi, Kingsville, Beeville, Robstown, Sinton, Mathis, Orange Grove, Premont, Falfurrias, George West, Three Rivers, and the towns between them. On-site where it matters, remote where it does not.