Sixty minutes on site. A written answer to where you stand.
Our engineer walks the office, runs the Nodeward assessment suite under signed consent, and issues a summary that places you on the Security Baseline with prioritised recommendations. No charge, no obligation. Based in Dubai; other emirates as per agreed schedule.
What the suite checks.
Each module produces its own report, attached to the summary as an appendix.
Internal discovery
What is actually on your network.
- Every host, open port and running service on the internal ranges you authorise
- Devices not on your asset list: the printer nobody owns, the camera on the staff VLAN
- Legacy protocols still answering: SMBv1, Telnet, FTP, public SNMP
- Remote desktop and VNC reachable from the user network
- Whether the network is flat or segmented
External attack surface
What an attacker sees from outside.
- Domains and subdomains, including ones you forgot
- Public IPs with exposed services and management portals
- TLS certificates expired or about to
- SPF, DKIM and DMARC: present, correct, and enforced
- Open cloud storage and exposed remote-access services
Vulnerability and patch status
How far behind you are.
- Known vulnerabilities by severity, mapped to CVE
- End-of-life operating systems and applications
- Missing critical patches older than 30 days
- Network device firmware age
- Authenticated scan where you grant it, for depth
Credential and dark-web exposure
Whether your passwords are already out there.
- Company email addresses found in breach datasets
- Breaches with plaintext or crackable passwords
- Most recent exposure date
- Accounts still active with a known exposed password
- Your domain on dark-web and paste sites
How an assessment runs.
Consent
You sign a one-page authorisation naming the ranges, domains and window. Nothing runs before that.
Site review
Comms room, cabling, wireless, devices, backups, identity and working practices, by observation and conversation.
Automated assessment
The four modules run from our equipment, within the window, non-destructively. You can watch.
Findings
Observed and scanned results combined, placed on the Baseline, ranked. Immediate actions raised on the day.
Close-out
Equipment removed, temporary access revoked, raw data stored encrypted or deleted on request. Written summary within five business days.
What it is, and is not.
Non-destructive. No exploitation, no password testing against live systems, no phishing of staff.
Point-in-time. It reports what could be observed within the authorised window; it is not a penetration test or a certification.
Scoped by you. Fragile, regulated or third-party systems you name are excluded.
Confidential. Findings go to the authorised representative and nobody else. Exposed passwords are never written down.
Request your free IT assessment.
A 60-minute review at your site. The written summary is yours to keep.