A little office.
A lot worth
protecting.

The first 10 clients who sign a service agreement receive the launch rates shown on this page. Those rates are held for 12 months from each client’s signing date, including monthly care, compliance scanning, custom policy work, and projects agreed during that period. Your quote confirms the work included, your fee, and the start and end dates of your offer.

The discount is available whether or not you leave a testimonial. There is no long-term contract required to keep the rate during your offer period.

The service cards list the work included in each type of engagement. The final quote depends on your staff, email domains, providers, and existing setup. Before work starts, you receive an exact scope, price, and schedule in writing.

The rollout is designed to keep legitimate mail flowing. I identify your sending services, test changes, and tighten the email policy in stages. We agree on a rollback plan before changes are made.

The free check only uses public records and needs no login. Paid work may require access to domain settings, Microsoft 365 or Google Workspace, and backup tools. Compliance scans need approved access to the Linux servers and scanner setup, agreed with you or your IT provider. The scope names the access needed. Your office keeps ownership of its accounts.

CIS Level 1 provides a practical security baseline. Level 2 adds stricter requirements for systems that need greater protection and may involve operational tradeoffs. Custom checks test the specific rules your organization has chosen. I help you select an appropriate profile for your systems and the evidence you need.

You can choose a CIS Level 1 or Level 2 assessment, custom checks on their own, or a combination. Your report identifies the benchmark, level, and any policy changes so you know exactly what was assessed.

Every CIS Level 1, Level 2, or custom assessment includes an initial scan and one recheck. After the first scan, you receive prioritized findings and an Excel report to share with your IT team. They make the fixes, then I scan the same servers against the same agreed profile or custom checks within 30 days of the report and show what changed.

Both scans are covered by the project fee. Hands-on remediation is separate, and you do not need a monthly subscription to use the included recheck.

Yes. First purchase a CIS Level 1, Level 2, or custom assessment so we can set up and agree on your scan configuration. After that, you can add the optional monthly service. I rerun that configuration once a month on the same covered servers and send your IT team an updated report.

Monthly scanning is billed separately from the initial package, starting on an agreed date. New policies, additional servers, and hands-on remediation receive a separate quote.

Yes. Bring your technical requirements and I can turn them into repeatable checks for settings such as SSH access, required services, password rules, logging, and file permissions. These can run independently or alongside CIS Level 1 or Level 2. The custom package includes up to 5 agreed automated checks; larger policies are quoted separately.

I can also tailor supported CIS settings to your policy. Tailored profiles currently cover RHEL 8/9. We agree on which requirements can be automated and which need a person to review evidence, and your report documents differences from the original benchmark.

I explain the finding and quote the additional work before making changes outside the agreed scope. Software subscriptions, new hardware, and migrations are separate from the listed service fees.

We agree on the users and systems covered, when alerts are reviewed, and response expectations. You receive a monthly summary, with a backup restore test every quarter. New projects receive a separate quote.