Cyber posture assessment

Know exactly where you stand.

A fixed-scope, two-week review of your security posture — delivered as a written report of what we found and a prioritised list of what to fix. No open-ended retainer, no scare tactics.

AED 7,500
Fixed price
2 weeks
Start to report
Fixed scope
No surprises

Not sure you need it yet? Take the ten-question self-check — two minutes, no email required.

What we look at

  • External exposure — what an attacker can see of your domains, mail, and internet-facing services.
  • Microsoft 365 & identity — MFA coverage, Conditional Access, admin roles, and risky sign-in settings.
  • Endpoint & backup posture — patching, disk encryption, and whether your backups would actually restore.
  • Staff exposure — a snapshot of where your people are the weak point, and the quickest ways to close that.

What you get

  • A written report in plain English — findings a business owner can read, not just an engineer.
  • Each finding rated by risk, so you know what actually matters first.
  • A prioritised list of recommendations — what to fix now, next, and later.
  • A walkthrough call to talk through the report and your questions.

How it runs

  1. A short kickoff to confirm scope and get read-only access where we need it.
  2. We assess across the four areas above over roughly two weeks, working quietly in the background.
  3. We write up findings, rate them, and prepare the recommendations.
  4. We deliver the report and walk you through it.

Who it's for

UAE businesses that want an honest, independent read on their security — whether you're preparing for a client or insurance requirement, inheriting an environment, or simply want to know where you stand before something forces the question.

It's a fixed engagement, not a sales pitch. If the report says you're in good shape, we'll say so.

Fixed scope and price as described above. Anything beyond it — remediation, ongoing monitoring, or a wider audit — is quoted separately and only if you want it.

Before you book

Ten questions. Two minutes.

Not a scan and not a sales funnel — ten things we check on every engagement, in plain English. Answer honestly and you will at least know which questions you cannot answer.

1 / 10
Microsoft 365 & identity

Is multi-factor authentication required for every user — not just the administrators?

Microsoft 365 & identity

Could you produce a list of everyone with administrator rights today, and would it be short?

Microsoft 365 & identity

When someone leaves, is their access removed the same day, by a process rather than by memory?

External exposure

Do you know which of your systems can be reached from the public internet?

External exposure

Is your domain configured so an outsider cannot send email that appears to come from you?

Endpoint & backup posture

Has a backup actually been restored and checked in the last 90 days — not just reported successful?

Endpoint & backup posture

Are laptops encrypted, so that losing one is an inconvenience rather than a data breach?

Endpoint & backup posture

Are computers and servers patched on a schedule that somebody owns by name?

Staff exposure

Have your staff had a phishing test or security awareness session in the last 12 months?

Staff exposure

Is there a written step for what someone should do the moment they realise they clicked something bad?

No email address, no sign-up. Your answers are scored in this browsing session and go no further unless you choose to send them.

Ready to see where you stand? Let's book it.

Tell us a little about your setup and we'll confirm scope and a start date. Prefer to start free? The IT Health Check is a lighter first look.

Book the Assessment → Free IT Health Check