Outside verified. Inside confirmed. Dated.
Your assessment is one record with a date on every line. What we verified from outside and what your firm confirmed are kept apart, so anyone who reads it knows which is which.
Three kinds of line, never mixed.
Outside: verified by us
Each way in we found, with its evidence and the date we read it. Every paid assessment is checked by a person before release.
Inside: confirmed by your firm
Some things no outside read can settle. Your assessment says so on that finding and records your confirmation, with its date. The inside checklist is your own team's check, on your schedule: we never access your mailboxes or systems, and a completed checklist is your team's confirmation, not something we verified.
Closed: checked again
When you mark a fix done, we read it again from outside wherever an outside read can settle it. The record shows the date it was confirmed closed.
For your clients and your insurer.
Three documents and a signed summary.
The exact fix, re-checked until closed.
Each fix comes as exact steps, in order, with the check that proves it is done. We re-check it from outside when you mark it done, every day through your first month of monitoring, and every week after that until our re-check confirms it closed. Where a finding cannot be confirmed from outside, your assessment says so on that finding and records your confirmation.
Said plainly.
It is not a certification, not a penetration test, not legal or compliance advice, and not a statement about your internal systems.
- NoWe never publish your record or name your firm publicly.
- NoWhat we find goes to you alone.
See what your firm shows the internet, without handing over a key.
Your domain and a work email at it. No password, no login and no software. Read-only, and sent only to your work email.