Assessment Tiers
Structured assessments for Canadian small businesses.
Two fixed-fee assessments and one ongoing assurance tier. Defined scope, plain-English reports, and a review call every time — so you know exactly where you stand and what to fix first.
Essential Exposure Review
Know where you stand.
Businesses with 5–15 employees that want a first honest baseline.
5–7 business days
- External exposure review
- Email security configuration check
- Website and domain scan
- Credential exposure check
- Basic access and MFA hygiene review
- Plain-language summary report
- Top 3–5 prioritized fixes
- 60-minute findings review call
Business Risk Assessment
Protect what you've built.
Growing teams of 10–50 staff running on Microsoft 365, Google Workspace, or remote setups.
7–10 business days
- Everything in the Essential Exposure Review
- Microsoft 365 / Google Workspace posture review
- Internal access control review
- Business process and phishing risk review
- Detailed findings and remediation roadmap
- Management-ready action plan
- Assessment review session
Continuous Assurance
Stay ahead of new threats.
Businesses that want ongoing monitoring and a priority advisory channel after their initial assessment.
Ongoing · quarterly check-ins
- Quarterly security posture check
- Ongoing credential exposure monitoring
- Priority incident advisory channel
- Staff offboarding verification
- Monthly threat briefing
- 30-day response SLA
Ongoing Coverage
Stay protected between assessments.
A one-time assessment is a starting point. Continuous Assurance keeps your findings current, monitors for new credential exposures, and gives you a priority channel to reach us when something happens.
Quarterly posture check
We revisit your security posture every quarter to account for staff changes, new tools, and emerging threats.
Credential exposure monitoring
Ongoing watch for your domain's credentials appearing in breach databases — caught early, before attackers use them.
Priority incident advisory
When something happens, you reach us first. Rapid containment guidance without waiting for a new engagement to open.
Staff offboarding verification
Confirm that departing staff accounts, access tokens, and device permissions are properly revoked.
Monthly threat briefing
A short, plain-English summary of the threats most relevant to Canadian SMBs in your sector that month.
30-day response SLA
Guaranteed response window on advisory requests — so you're never left waiting when it matters.
Active security breach or digital scam?
If your business is currently experiencing an online security incident, email compromise, or fake invoice fraud, do not wait. Our response specialists provide urgent diagnostic support, breach containment, and regulatory guidance.
All prices in CAD. Assessments completed remotely — no on-site visit required. Not sure which tier fits? Book a free discovery call and we'll help you decide.