Documented findings
The current state of your IT, audited against over 100 checks in eight areas and presented in plain language.
Independent IT & cybersecurity check
The IT Check for your business
A thorough IT and cybersecurity audit, tailored to businesses. We assess your IT and your security against over 100 checks in eight areas, document the current state and deliver findings with a prioritised action plan.
From 1,299 € excl. VAT. On site assessment Findings within two weeks, presented in person First call, no charge
Cyber attacks stopped hitting only large corporations a long time ago. Small and mid sized businesses are attacked constantly, because protection is often missing there and the effort quickly pays off for attackers. All the more important to know where your IT really stands.
The IT Check is a thorough IT audit for mid sized businesses. It documents the state of your IT across eight areas: from network, server room and servers to workstations and user accounts, through to email, domain and the technical measures relevant to GDPR.
The results are prepared in plain language and presented in person: documented findings and a prioritised action plan, on request as an independent second opinion alongside your existing IT partner.
Sound familiar?
If any of these questions has ever crossed your mind, the IT Check is built exactly for that. Including as an independent second opinion when you want to know whether everything really is in order.
Are we actually secure, or just hoping we are?
Would we even notice an attack?
What if all our data is encrypted tomorrow?
Does our backup really work when it matters?
Who actually has access to our data?
How easy are we to find for attackers online?
Would our business survive a hack?
Would we know what to do in the first hour of an emergency?
Is our IT provider doing a good job, or are we just trusting our luck?
Did we invest in the right security?
Would our IT hold up to a review by an insurer or customer?
When did someone from outside last check this?
What you take away from the IT Check
Three deliverables you can work with directly.
Personal presentation
We walk you through the results in person, on site or remote. On request together with your existing IT partner.
Prioritised action plan
Concrete next steps, ordered by urgency and effort. You decide what to implement and with whom.
Three questions the IT Check answers
The IT Check works along three questions that actually matter for your business. Behind them sit over 100 concrete checks across 8 audit areas, from firewall rules to a tested restore, all at one fixed price.
Can someone get in? Almost every attack starts from outside. We check the entry points attackers typically go for first.
- Firewall and remote access (VPN): configuration, rule set and version, so no outdated or open access becomes a way in
- Wi-Fi and internal network: encryption, clean separation of company and guest network and hardened switches, so a single compromised device cannot take the whole network with it
- Email: protection against spoofed senders in your name (SPF, DKIM, DMARC), spam and malware filtering, and risky forwarding rules that quietly carry data out of the house
- Domain and DNS: secured management, so nobody can take your domain away or reroute your email traffic
- Workstations: security updates, virus protection, disk encryption, screen lock and the handling of USB media, the most underrated way in day to day
- Your visibility on the internet: in a light penetration test we see your systems the way an attacker finds them from outside, and show what is openly reachable. For a full review across several attack paths there is the standalone penetration test
What if it happens anyway? No protection is perfect. What matters is whether your business survives an incident and is back up within hours.
- Backup concept: runs, offsite copy and, most important, a tested restore. A backup that does not restore when it counts is not a backup
- A backup copy that ransomware cannot delete or encrypt, your last line of defence against a ransom demand
- Servers: hardware condition and headroom, operating system, security updates and known vulnerabilities that attackers demonstrably exploit
- Programs and services running on the server and their licenses, so no forgotten service becomes a security risk or an expensive re-licensing bill
- Server room and power: access, environment (climate, fire and water protection) and uninterruptible power supply (UPS), so a power cut does not turn into data loss
- User accounts and permissions: analysis of your user directory (e.g. Active Directory), active, inactive and orphaned accounts of former staff, two-factor login, password rules, admin rights and the joiner, mover and leaver process
Would we hold up to a review? When it counts, what matters is what you can prove, to the authorities, your insurer and your customers.
- Which of the technical measures relevant to GDPR are actually in place (encryption, access control, logging)
- Where personal data resides and whether a deletion concept exists that holds up to a review
- Whether these measures are actually lived day to day
- Traceable documentation of network, servers and access that you can produce when it counts
Add-ons
Bookable in addition to the standard check.
- Cloud check: Microsoft 365, Google Workspace and similar services
- Data leak check: whether company credentials have surfaced in known breaches
- Phishing simulation
- Network inventory
There is no such thing as complete security, and we do not promise it. The IT Check shows you where you stand today and where your biggest risks are.
Need a NIS2 supplier evaluation or a gap analysis against DORA, NIS2 or ISO 27001? We handle that separately in the compliance area. Go to compliance overview →
More details on the process and the areas we check are in the PDF.
IT Check print version (PDF)How the IT Check works
Kept lean, so your business keeps running.
Call and setup
A short call clarifies how your business works. We settle the confidentiality agreement and the access we need in the same step.
On site capture
A single appointment at your site. We only read and document, nothing on your systems is changed, and your business keeps running undisturbed.
Findings and review
We evaluate everything carefully, prioritise by risk and walk you through the documented findings in person. You receive them within two weeks.
All data and results stay strictly confidential. We sign a confidentiality agreement before we start, the findings are yours and are never disclosed to third parties.
Common questions
How long does an IT Check take?
Data capture on site is done in a single appointment. It is read-only and runs without interruption, so your business carries on as normal. You receive the documented findings within two weeks, presented in person.
What does an IT Check cost?
The IT Check starts at 1,299 € excl. VAT. The final price depends on the size and scope of your IT and is fixed after the first call.
Is a penetration test included?
The IT Check includes a light penetration test. It looks at what is reachable from outside through an attacker's eyes and is deliberately kept lean in scope. If you need a full review across several attack paths, that is commissioned as a separate penetration test.
Do we have to commit to anything afterwards?
No. The IT Check is a standalone step. The findings are yours. What you act on, and at what pace, is entirely your decision.
Who is the IT Check for?
For mid sized businesses that want to know where their IT security stands. It is especially useful for companies that work with sensitive data or have lost the overview over time.
Terms such as IT audit, penetration test or GDPR measures are explained briefly in the IT security knowledge base.
Ready?
Know where you stand
Start with an IT Check. The first call carries no charge and quickly clarifies whether the IT Check makes sense for your business.
Price
from
1 299 €
excl. VAT
Book a first call