An independent, read-only assessment of what anyone on the internet can already see about your firm, written for the owner and precise enough for your IT provider to act on. Attackers now use AI to read a firm from the outside in minutes. We read it the same way, first, and a person approves every assessment before it is released.
Read-only. Delivered inside 72 hours of confirmation. Mutual NDA available on request. Includes what AI assistants now tell your clients about you.
Personal credentials, reused passwords, private addresses and every identifier tied to the named individual across breach repositories.
190 organisations were listed on criminal leak sites in the last 7 days, by 45 different groups. Of these, 65 were in the United States and 4 in Canada.
Source: public ransomware leak-site listingsA data breach notification from the Defense Manpower Data Center said unauthorized users exploited a flaw in a file-sharing system to steal millions of U.S. military personnel records over several months. The stolen data …
Threat actors deployed a ClickFix campaign abusing Custom GPTs on ChatGPT to infect victims with malware. At least 40 users were infected after running malicious PowerShell commands promoted via sponsored search ads and fake …
Two former US Air Force members were sentenced to federal prison for conducting multi-year business email compromise and phishing operations. The conspirators stole credentials and spoofed emails to divert millions of dollars in wire...
An attacker gets inside an inbox, watches finance traffic, then redirects a wire. One of the costliest internet-crime categories the FBI tracks.
TICKS FROM JAN 1 AT THE 2025 REPORTED RATE · SOURCE: FBI IC3 2025 INTERNET CRIME REPORT
Cyber insurance applications ask about email authentication, multi-factor sign-in, backups and patching, and some insurers look at your firm from outside at renewal. Then there is wire fraud: if someone can send email as your firm, a changed bank detail can go to a client under your name. Then your regulator or professional body, whose rules on client data the assessment helps you answer.
Attackers now use AI to read a firm from the outside in minutes. We read it the same way, first, and a person approves every assessment before it is released.
Every engagement runs the same correlation and the same human review before release. The only thing that changes is whose perimeter is in scope.
Coverage across the firm, its principals and their households. Built for law, accounting and wealth firms, sports agencies and boutique counsel.
Three documents and a signed summary for owner-run firms: the Owner Summary and Action Brief, Technical Evidence and Findings, the Rules and Insurance Briefing and the Signed Assessment Record.
Deep-dive coverage on the principal, household and inner circle. For founders, GPs, general counsel and anyone whose exposure travels with the person.
Daily re-checks, an alert when something new appears, and a record of how exposure changes over time. For firms whose exposure changes week to week.
Most firms commission the first briefing because something worried them. They renew because the document turns out to be worth more than the reassurance.
Diligence questions arrive from carriers, counterparties and prospective clients whether or not you are ready for them. A current briefing is the document that answers all of them in one pass.
A firm that can show a current exposure briefing answers the security question before a prospective client has to ask it.
Renewal forms ask about email authentication, multi-factor sign-in, backups and patching. A dated outside reading lets you answer from evidence rather than memory.
Exposure is a standard diligence line item in any transaction. A clean, dated file stops being a lever against your price.
In 2025 a breach took an average of 241 days to identify and contain (IBM). A mapped surface replaces an assumption with a dated, prioritised list.
Four products, seven channel programs, twenty-one sector playbooks and a published research library. Firms rarely arrive needing all of it, but nothing has to be invented when they do.
What your domain shows the public internet: DNS, certificates, services visible from outside and the identifiers an attacker reads first.
Checked against the public sources an attacker reads: breach records, paste sites and public registries.
Findings are classified by severity and mapped to the statutory framework that applies to your sector.
A private dashboard of every finding with its fix, the Owner Summary and Action Brief, Technical Evidence and Findings, the Rules and Insurance Briefing, the Signed Assessment Record and a prioritised remediation plan, verified closed once it is done. Reviewed by a person before release.
Daily re-checks, an alert when something new appears, and a record of change over time.
Your profile is already assembled in the databases attacker infrastructure references. Nothing we surface is obtained illicitly; all of it is correlated from sources already in circulation.
Billions of compromised credentials, cross-referenced by domain and email pattern.
Published business listings, corporate registry filings and the firm’s own public pages.
Paste sites where stolen data is posted, and public threat-reputation lists.
DNS, certificate chains, open services and headers. The surface attacker scouting maps first.
Every finding in the briefing carries the statutory reference a regulator, carrier or counterparty would cite. Your counsel does not have to translate an engineering report into an obligation.
Safeguards and disposal rules for customer records held by registered advisers and broker-dealers.
The federal standard for protecting non-public personal information at financial institutions.
Supervisory and recordkeeping obligations examined at member firms.
Safeguards for protected health information and the records that identify patients.
Canadian obligations for personal information held in the course of commercial activity.
The control framework counterparties and carriers most often ask firms to map against.
The trust services criteria buyers ask about during vendor and transaction diligence.
Each briefing cites the frameworks that govern your sector, not the full list.
No. Every assessment is read-only and external. We correlate publicly available and breach-sourced data and analyse what your infrastructure already publishes. No intrusive testing, no agents, no access to your network.
Because collection and correlation are automated, and a person’s time goes into review and analysis. What you are not paying for is a large engagement team you do not need.
Sent privately to your firm, kept until you ask us to delete it, and deleted when you do. A mutual NDA is available on request before any call.
The documents are delivered inside 72 hours of confirmation, after a person has reviewed them.
Yes. The remediation roadmap is prioritised and written for an operator, not an analyst. Firms without internal security are the majority of our clients.
You get that in writing, dated and signed. That document answers carrier applications, client diligence questionnaires and counterparty requests on its own.
Twenty minutes, under mutual NDA if you ask for one. We scope what is in range, confirm a delivery date, and tell you plainly whether an engagement is worth it for a firm your size.