Cybersecurity assessments for small and midsize businesses
Most small businesses do not get breached by genius hackers. They get breached through an old password, a forgotten port forward, or an email account without multifactor authentication. A security assessment finds those gaps first and tells you, in plain English, which ones matter.
Book a free consultationWhat we look at
- External exposure: what your business looks like from the internet, including open ports, remote access, camera systems and forgotten devices.
- Microsoft 365 or Google Workspace: multifactor authentication, admin accounts, mail security (SPF, DKIM, DMARC), sharing settings and sign in risk.
- Internal network: vulnerability scanning of computers, servers, printers and network gear, plus firewall and Wi Fi configuration.
- Endpoints: patching, antivirus or EDR coverage, local admin rights, disk encryption.
- Backups and recovery: whether your backups exist, are protected from ransomware, and can actually be restored.
- People and process: who has access to what, how accounts are removed when staff leave, and how a suspicious email gets reported.
What you get
- An executive summary written for owners, not engineers.
- Detailed findings with evidence, each rated by risk and effort to fix.
- A prioritized remediation roadmap: what to fix this week, this quarter and this year.
- A walkthrough call to go over results and answer questions.
- Optional remediation by Leck Tech, quoted separately, or guidance for your existing IT provider.
Pricing
Every engagement is a fixed fee, quoted up front after a free consultation, based on the size of your business and the scope you choose. No hourly billing surprises.
Frequently asked questions
Will an assessment disrupt my business?
No. Scans are scheduled with you, tuned to avoid disruption, and can run after hours. Nothing changes on your systems without your approval.
We already have an IT provider. Can we still use you?
Yes. An independent assessment is a good way to verify the work, and the findings are written so any competent provider can act on them.
Do you need to come on site?
Not always. Cloud and external reviews are fully remote. Internal network scanning is done on site in our local area, or remotely over a secure connection you approve.
Start with a free 30 minute consultation
Tell us what is going on and what you want to achieve. We will reply within one business day to set up a call. Every engagement is a fixed fee, quoted up front.