I bought a security audit

Scope purchase

Stripe Checkout completes the order. North American billing supported, with CAD or USD pricing depending on the card issued. Payment confirmation arrives within a minute.

Confirmation and audit scan

You receive an intake email within a minute confirming payment. Our scan runs in the background — checking roughly 10 sources for credential exposure, breach corpora, paste sites, domain impersonation, and infrastructure tied to your company. No action required on your side.

Audit Ready notification

Subject: "Your forensic audit for [your company] is complete." The email contains a permanent link to your audit dashboard — bookmark it. No password required.

Findings review

Findings are grouped by severity (Critical, High, Medium, Low). Each finding has a plain-English description and concrete remediation steps embedded inline. This is where you assess which items you can handle internally and which require specialist support.

Remediation path selection (DIY or Implementation)

Two paths and you can mix them per-finding:

• DIY — follow the remediation steps inside each finding yourself (or hand them to your IT person). Best for simple things: rotating a password, enabling MFA, updating a DNS record.
• Book Implementation — our contractor walks you through every fix in screen-share sessions. Best for technical work like M365 conditional access, DMARC policy, or anything you don't recognize. Tier 1 ($1,499) covers DNS hardening, credential resets, MFA rollout, and port closure. Tier 2 ($2,499) adds compliance documentation and the dated Hardening Certificate suitable for cyber-insurance renewals.

Remediation is performed

Whichever path you chose, the actual remediation happens here — you, your IT, or our contractor implements each change. No need to declare in advance which findings you will handle yourself versus which you will outsource. You can decide per-finding as you go.

Mark fixed and reverification

Click "I've done this" on a finding once it's fixed, then click Reverify. We re-check the same source the finding came from. Status flips to Resolved (gone), Mitigated (historical record, credential rotated), or Still present with a note on what remains. Repeat per finding.

Next steps

Most customers proceed in one of two directions: activate Continuous Monitoring for ongoing alerts on new exposures, or — for customers on the Implementation Tier 2 path — collect your Hardening Certificate as dated proof for insurance underwriters or vendor security reviewers. Many do both. Your audit dashboard remains accessible regardless.