United States
Baseline Security Audit, sized to the estate
A fixed-fee, read-only review of your organization's endpoints, identities, email, backups and network. Your MSP orders it. You receive a scored report, an executive summary, a prioritized remediation plan, and a 45-minute review call. Typically 5–10 business days after access is granted, depending on size.
Last updated 21 October 2026
How is the baseline audit sized?
| Devices | Pricing |
|---|---|
| Up to 25 | Partner pricing on request |
| 26–100 | Partner pricing on request |
| 101–250 | Partner pricing on request |
| 251–500 | Partner pricing on request |
| 500+ | Partner pricing on request |
Partner pricing on request, billed through your MSP. The client dashboard is included. Estates over 500 devices are scoped through your MSP.
What is covered?
- Endpoints and EDR
- Coverage, tamper protection, encryption, and unsupported systems.
- Identity and MFA
- Sign-in policy, privileged accounts, stale accounts, and legacy authentication.
- Email security
- SPF, DKIM, DMARC, forwarding rules, and link and attachment controls.
- Backup and recovery
- What is protected, whether a copy is isolated, and whether restore has been tested.
- Firewall and remote access
- Exposed management, VPN or ZTNA, and vendor access.
- Logging
- Where alerts go, how long they are kept, and which systems are silent.
- RMM and tool hygiene
- Who can run scripts, patch status, and tools that are installed but unused.
Compliance readiness audit
A scoped review mapped control by control, with an evidence-ready gap report. Partner pricing is on request and depends on the frameworks and the size of the environment. It is a readiness review. It does not certify you, and it is not a legal opinion.
Mapped for United States
- NIST CSF 2.0
- CIS Controls v8
- HIPAA Security Rule
- PCI DSS 4.0
- CMMC Level 1–2 readiness
- Cyber-insurance questionnaires
This is not a penetration test. See how an audit, a pen test, and a vulnerability scan differ.