01
Security risk score
A standardized 0-100 score across your environment, mapped to NIST CSF 2.0 controls and benchmarked against your industry. You leave knowing exactly where you stand and which gaps move the needle first.
Free, no commitment, no card
AI + Cybersecurity Assessment.
A 90-minute read on your security posture, your Microsoft 365 hygiene, and the three workflows where AI will pay back fastest. Five deliverables. Senior engineer. Zero sales pitch at the end.
90 minutes
5 deliverables
NDA-ready
Senior engineer
Five deliverables
What you get, specifically.
No mystery scoring. No 200-page output. Five concrete artifacts your leadership team can act on the same week.
02
Microsoft 365 review
DLP, conditional access, MFA coverage, Copilot eligibility, and licensing efficiency. The single richest source of both security risk and AI opportunity for most SMBs.
03
Password / identity review
Privileged accounts, secrets hygiene, conditional access, MFA coverage. We map the paths a credential-theft attacker would actually take through your stack.
04
AI opportunity report
Three workflows in your environment ranked by realistic AI ROI, with rough build estimates and the deployment mode (cloud, Azure AI Foundry, or air-gapped) each one fits. No theory; only workflows you actually have.
05
Device / network review
Endpoint posture, patch status, network segmentation, remote-access exposure. What an attacker would see if they got inside the perimeter and what we'd close first.
How it works
A senior engineer, 90 minutes, one page out.
No discovery loops. No pre-call calls. We set a time, we look at the environment, we hand you a one-page summary, and we have a 30-minute conversation about what to do with it.
Format
90-minute remote session (or on-site if you're in DFW)
Output
One-page written report + 30-minute readout call
Access needed
Read-only M365 admin + a device inventory if you have one
Who runs it
A senior engineer. Not a salesperson.
Confidentiality
Default. Mutual NDA available before we start.
Cost
$0. No card. No commitment after.
Why it's free
Two reasons. Both honest.
First: we need to know whether your environment is one we can actually help with. So we look. That's cheaper for both of us than three weeks of qualification calls.
Second: you need to know whether we're worth more of your time. So we earn it. About 1 in 3 of these turns into a paid engagement. The other 2 in 3 walk away with a usable artifact and an honest read on what to do next.
Either way: no sales deck, no hard pitch, no email sequence. The follow-up is one short conversation about where we'd be a fit and where we wouldn't.
Common questions
Direct answers.
What's the catch?
There isn't one in the traditional sense. We do this for two reasons. First: we need to know whether your environment is one we can actually help with, so we look. Second: you need to know whether we're worth more of your time, so we earn it. About one in three of these turns into a paid engagement. The other two in three walk away with a usable artifact and our honest read on what to do next.
What happens at the end of the 90 minutes?
A short conversation about where we'd be a fit, and an equally short conversation about where we wouldn't. No deck, no contract drafting, no pressure call cadence. If we're not the right firm, we'll usually be able to point you at one that is.
We've already had a pen test / vendor assessment / audit. Is this redundant?
No. Pen tests look for ways in; audits look at controls on paper. This looks at your environment through the lens of AI readiness and operational security posture, which is a different question. If you've recently had a third-party audit, share it; we'll use it as the starting point and add what's missing.
Will you sign an NDA?
Yes. Mutual NDA is standard before any access is granted. We can use your template or ours.
Is the AI piece serious or a marketing veneer on a security audit?
Serious. The AI opportunity report is the most-cited deliverable in our post-engagement feedback. We've ranked workflows for ROI across healthcare, financial services, and government. The security pass is the wedge; the AI pass is the reason most teams stay.
Request the assessment
Pick a week. We'll be in touch within one business day.
We schedule on a rolling basis. Most assessments happen within 2 weeks of inquiry; we can move faster when there's a real driver.