Evidence, on a schedule.
Two instruments our clients rely on: one that tells you how your firm looks from the outside right now, and one that tells you every month what changed, what we handled, and what — if anything — needs you.
Domain Health Check
Your domain is the part of your firm the whole world can inspect — and the part attackers inspect first. Our assessment engine examines it the way they would, without touching a single internal system, and returns a graded posture in minutes.
It checks whether your name can be borrowed to defraud your clients, whether your mail is authenticated and protected in transit, whether your DNS foundations are sound, and whether the records that should be watching for abuse are actually reporting anywhere.
- Email authentication — whether anyone can send mail as your firm
- Transport security — whether your mail is protected in transit and failures are reported
- DNS integrity — signing, delegation and the foundations everything else rests on
- A graded result — scored A to F, with each finding ranked by consequence
A partial scan is never scored. If any check cannot be completed we say so rather than presenting an incomplete picture as a clean one — a timeout must never be reported as an absent record.
without touching your systems
ILLUSTRATIVE RESULT · YOUR OWN GRADE WILL DIFFER
Cyber Threat Report
Prepared for the principals
Monthly Cyber Threat Report
A short, board-readable account of your security month — written for principals and partners rather than for engineers, and structured around three questions you can answer in a partners' meeting without translation.
- What changed — new exposures, posture movement, devices joining or falling silent
- What we handled — what was blocked, contained or closed, without needing you
- What needs you — decisions only a principal can make, and usually nothing at all
It is the document you can hand to your insurer, your regulator or an incoming partner as evidence that your firm takes its duty of confidentiality seriously — and it is produced whether or not anything went wrong, because a quiet month is itself a finding worth recording.
Find out how your firm currently grades.
A confidential conversation, then a rigorous look at your external posture — before someone less friendly compiles the same picture.