Solutions · Security and compliance
An assessment you can repeat, not a report you file away
Structured playbooks for assessing applications, cloud accounts, access and suppliers, improved over many engagements. We run them with you, and they stay with your team, so the next assessment measures your progress instead of starting again.
Use cases
Is this you?
The first assessment is rarely the hard part. The hard part is that the second one usually starts from scratch.
A customer security review is coming
A large prospective customer has sent a questionnaire, and honest answers depend on an assessment nobody has done.
A new head of security
Someone has just been made responsible for security and needs to find out quickly where the real risks are.
After an incident
Something went wrong, and the board wants to know what else could go wrong.
Findings that never get fixed
Earlier assessments produced long reports that were soon forgotten, and the same issues come up every year.
What it delivers
A method, not a one-off
Each playbook sets out a sequence of checks, the evidence to collect and how to rate what is found.
- Application and API assessment
- Cloud account and configuration review
- Review of access and administrator accounts
- Third-party and supplier assessment
- A rating system based on business impact rather than the severity a tool assigns
- Findings written as tickets with owners, not as paragraphs in a report
Audit playbooks
Applications and APIs
Sign-in, permissions, input handling and secrets
Cloud accounts
Accounts, network exposure, storage and logging
Identity and access
Joiners, leavers, admin access and multi-factor sign-in
Suppliers
Access held, data shared and contract controls
Rating
Impact and likelihood, in business terms
Findings
Owner, fix, acceptance criteria and due date
What we do around it
Structure from the playbook, judgement from our engineers
The playbooks make each assessment consistent. Our engineers bring the judgement about what matters in your environment.
- Scoping
- We choose and trim the playbooks to fit your environment and deadline, so the effort goes where the risks are.
- Assessment
- Our engineers work alongside yours, so your team learns the method while the work is being done.
- Prioritisation
- We rank the findings with you by business impact, so the first fixes are the ones that matter most.
- Fixing
- If you want, we fix what we find rather than handing over a list.
- Repeat
- The same playbooks are run again on a schedule, so progress is measured against the first result.
Pricing and demonstrations
Tell us what prompted the question
A customer review, a new role and an incident each need a different starting playbook, and we will show you which one fits.
Priced according to your size, number of users and the support you need. There are no tiers.