2checkan IT Edge Pro service

IT security assessment for small and medium businesses

Is your company's IT secure? Find out in two weeks.

We check your email, network, computers and accounts against a clear standard of 38 controls. You get a plain-language report: what is fine, what is risky and what to fix first.

Order a check How it works

01What we check

Twelve areas attackers look at first

Each control is rated as meets, partly meets or missing. The most serious risks carry the most weight.

01.1

From outside

Email and public servers

What anyone on the internet can see about you.

  • Email spoofing protection (SPF, DKIM, DMARC)
  • Open ports and remote access
  • TLS certificates and old protocols
  • Domain protection (DNSSEC, registry lock)
01.2

Network

Network and servers

What runs on your office network and how it is separated.

  • Insecure services (Telnet, FTP, SMBv1)
  • Printers and cameras kept apart
  • Management interfaces (virtualisation, iLO/iDRAC)
  • Wi-Fi security
01.3

Computers

Computers and accounts

Whether workstations are up to date and protected.

  • Unsupported Windows versions
  • Updates and antivirus
  • Disk encryption and screen lock
  • Admin rights, stale accounts, password policy
01.4

Processes

Backup, people and procedures

Whether the company would recover from an incident.

  • Backups and restore tests
  • A named owner and security rules
  • Staff training
  • An incident response plan

02How it works

Four steps, nothing installed

  1. 01

    Written permission

    You sign an authorisation and list your domains and public IP addresses. Without it we check nothing.

  2. 02

    External check

    We check what the internet sees: email, certificates, open ports.

  3. 03

    On-site check

    A read-only tool runs on one computer. It changes nothing and leaves nothing behind.

  4. 04

    Report and plan

    We go through the results and the action plan: quick wins, 90-day work and longer projects.

More about the check

03What we never do

A security check must not create risk

  • We change nothing on your systems: we only read settings.
  • We never collect passwords, password hashes or access tokens.
  • We check nothing outside the signed authorisation, and only on the agreed dates.
  • We do not attempt break-ins, guess passwords or disrupt services.
  • We share the results with no one: they are for you only.

04Order

Let's start with a short call

Write a few sentences about your company. We reply within one working day to agree the scope and price.