Assessments

Know your exposure before attackers do.

Two ways to find out where you stand: a free external check of what the internet can see, and a paid internal vulnerability assessment of what's inside your network.

Choose your starting point

Two assessment tiers.

Free

Free Security Assessment

A discovery call plus an automated, non-intrusive external vulnerability scan of your public domains, websites and email security.

  • DNS configuration
  • Email security: SPF, DKIM and DMARC
  • TLS certificates and settings
  • Website security headers
  • Exposed internet-facing services

You receive: a short findings report with plain-language next steps.

Requires a signed authorization before any scan.

Book a free assessment

Internal Vulnerability Assessment

A scanner (a mini PC or virtual machine) placed inside your network to see what an attacker could see once inside.

  • Internal asset and device discovery
  • Vulnerabilities and missing patches
  • Weak or default configurations
  • Exposed file shares

You receive: a detailed report and a prioritized remediation plan, walked through with your team.

Optional add-on: a vendor threat assessment, such as the Fortinet Cyber Threat Assessment, can be included. Pricing on request.

Request a quote

Your assessment fee, credited in full

Sign a DefentriGuard Managed SOC or MDR contract within 60 days of your Internal Vulnerability Assessment and we credit the full assessment fee toward your service.

How it works

Simple, authorized, and non-intrusive.

1

Discovery call

We learn about your organization, priorities and concerns, and agree on what's in scope.

2

Signed authorization

You sign an authorization that confirms the targets, timing and contacts. We never scan without it.

3

Scan

We run an external scan of your public domains, or place our scanner inside your network for the internal assessment.

4

Report & walkthrough

We explain what we found in plain language and recommend practical next steps.

Our approach

Vulnerability assessment, done responsibly.

  • Non-intrusive. We identify and report weaknesses. We don't attempt to exploit them or disrupt your operations.
  • Authorized only. Every assessment starts with your written authorization and an agreed scope.
  • Confidential. Findings are shared only with your nominated contacts, in line with the Data Privacy Act of 2012.
  • Actionable. Every finding comes with a clear, prioritized fix, whether or not you become a client.

Find out where you stand.

Start with a free security assessment: a discovery call plus a non-intrusive external scan of your public domains, websites and email security. You get a short findings report and plain next steps. No obligation.

Book a free security assessment