Security Configuration Audit
We check how your servers, cloud accounts and network devices are set up, and list the settings that leave you exposed.
Who it is for
- Businesses that moved to the cloud quickly and have not reviewed the settings since
- IT teams that want an outside check of their hardening work
- Companies preparing for a customer security review or an audit
What you get
A list of risky settings
Each one explained, with where it is and why it matters.
Comparison with accepted guidance
We use CIS Benchmarks and NIST guidance as reference points.
A prioritised fix list
What to change first, and what can wait.
Notes for ongoing checks
Simple ways to stop settings drifting back.
How an engagement runs
Free consultation
A short call to understand what you run, what worries you and any deadlines.
Scope and quote
We agree what is in and out of scope, the dates and the cost in writing before work starts.
Assessment
We review the agreed systems and accounts, usually with read-only access that you control.
Report and debrief
You receive the written report and a prioritised fix list, and we walk your IT team through it.
Fix and re-check
You fix what matters most. We can check the fixes and update the report.
Typical duration:To be confirmed: typical duration
Sample deliverable
A redacted excerpt of a configuration audit finding will appear here. To be confirmed: approved redacted sample.
Packages
Every engagement is quoted from its scope. The quote is fixed in writing before work starts.
Focused
One cloud account, or a small set of servers or devices.
Contact us for a quote
Ask about this packageStandard
Cloud accounts plus servers and network devices.
Contact us for a quote
Ask about this packageComprehensive
A wide review including identity and access, with a re-check included.
Contact us for a quote
Ask about this packageFrequently asked questions
How long does a configuration audit take?
It depends on the size of what we are looking at. We give you dates in the written quote before you commit.
How much does it cost?
Contact us for a quote. We price each engagement from its scope, and the quote is fixed in writing before work starts.
Will you disrupt our systems or staff?
We agree the rules of the engagement with you first, including when testing may happen and what must not be touched.
Do you need admin access?
Usually read-only access is enough. We agree the access and how it is removed afterwards.
Ready to talk?
Book a free consultation. We will ask about your systems, answer your questions and, if it suits you, send a written quote.