Assessment Tiers
Structured assessments for Canadian small businesses.
Two fixed-fee assessments and one ongoing assurance tier. Defined scope, plain-English reports, and a review call every time — so you know exactly where you stand and what to fix first.
Essential Exposure Review
Know where you stand.
Businesses with 5–15 employees that want a first honest baseline.
5–7 business days
- External exposure review
- Email security configuration check
- Website and domain scan
- Credential exposure check
- Basic access and MFA hygiene review
- Plain-language summary report
- Top 3–5 prioritized fixes
- 60-minute findings review call
Business Risk Assessment
Protect what you've built.
Growing teams of 10–50 staff running on Microsoft 365, Google Workspace, or remote setups.
7–10 business days
- Everything in the Essential Exposure Review
- Microsoft 365 / Google Workspace posture review
- Internal access control review
- Business process and phishing risk review
- Detailed findings and remediation roadmap
- Management-ready action plan
- Assessment review session
Security Renewal Plan
Your assessment stays current. Your exposure doesn't drift.
Businesses that completed an assessment and want their report to stay current — for their insurer, their clients, and themselves.
Ongoing · quarterly check-ins
- Quarterly security posture check
- Ongoing credential exposure monitoring
- Priority incident advisory channel
- Staff offboarding verification
- Monthly threat briefing
- 30-day response SLA
Ongoing Coverage
Stay protected between assessments.
A one-time assessment is a snapshot. The Security Renewal Plan keeps that snapshot current — quarterly posture checks, credential monitoring, and offboarding verification as your team and tools change. Your assessment proves you were secure when you completed it. The Renewal Plan proves you still are.
Quarterly posture check
We revisit your security posture every quarter to account for staff changes, new tools, and emerging threats.
Credential exposure monitoring
Ongoing watch for your domain's credentials appearing in breach databases — caught early, before attackers use them.
Priority incident advisory
When something happens, you reach us first. Rapid containment guidance without waiting for a new engagement to open.
Staff offboarding verification
Confirm that departing staff accounts, access tokens, and device permissions are properly revoked.
Monthly threat briefing
A short, plain-English summary of the threats most relevant to Canadian SMBs in your sector that month.
30-day response SLA
Guaranteed response window on advisory requests — so you're never left waiting when it matters.
Active security breach or digital scam?
If your business is currently experiencing an online security incident, email compromise, or fake invoice fraud, do not wait. Our response specialists provide urgent diagnostic support, breach containment, and regulatory guidance.
All prices in CAD. Assessments completed remotely — no on-site visit required. Not sure which tier fits? Book a free discovery call and we'll help you decide.