Cyber posture assessment

Know exactly where you stand.

A fixed-scope review of your security posture, usually two weeks from kickoff, with the start date agreed when you book. You get a written report of what we found and a prioritised list of what to fix. No open-ended retainer, no scare tactics.

AED 7,500
Fixed price
About 2 weeks
From start date to report
Fixed scope
No surprises

What we look at

  • External exposure — what an attacker can see of your domains, mail, and internet-facing services.
  • Microsoft 365 & identity — MFA coverage, Conditional Access, admin roles, and risky sign-in settings.
  • Endpoint & backup posture — patching, disk encryption, and whether your backups are set up to restore, checked with a sample test restore.
  • Staff exposure — how easily your people could be targeted (public details, sign-in habits, past breaches), and the quickest ways to close that.

What you get

  • A written report in plain English — findings a business owner can read, not just an engineer.
  • Each finding rated by risk, so you know what actually matters first.
  • A prioritised list of recommendations — what to fix now, next, and later.
  • A walkthrough call to talk through the report and your questions.

How it runs

  1. A short kickoff to confirm scope and get read-only access where we need it.
  2. Once we agree a start date, we assess across the four areas above over about two weeks, working quietly in the background.
  3. We write up findings, rate them, and prepare the recommendations.
  4. We deliver the report and walk you through it.

Who it's for

UAE businesses that want an honest, plain-English read on their security — whether you're answering a client or insurance questionnaire, inheriting an environment, or simply want to know where you stand before something forces the question.

Fixed scope for organisations of up to about 100 users.

It's a fixed engagement, not a sales pitch. If the report says you're in good shape, we'll say so.

Fixed scope and price as described above. Anything beyond it — remediation, ongoing monitoring, or a wider audit — is quoted separately and only if you want it.

Before you book

Ten questions. Two minutes.

Not a scan and not a sales funnel — ten things we check on every engagement, in plain English. Answer honestly and you will at least know which questions you cannot answer.

1 / 10
Microsoft 365 & identity

Is multi-factor authentication required for every user — not just the administrators?

Microsoft 365 & identity

Could you produce a list of everyone with administrator rights today, and would it be short?

Microsoft 365 & identity

When someone leaves, is their access removed the same day, by a process rather than by memory?

External exposure

Do you know which of your systems can be reached from the public internet?

External exposure

Is your domain configured so an outsider cannot send email that appears to come from you?

Endpoint & backup posture

Has a backup actually been restored and checked in the last 90 days — not just reported successful?

Endpoint & backup posture

Are laptops encrypted, so that losing one is an inconvenience rather than a data breach?

Endpoint & backup posture

Are computers and servers patched on a schedule that somebody owns by name?

Staff exposure

Have your staff had a phishing test or security awareness session in the last 12 months?

Staff exposure

Is there a written step for what someone should do the moment they realise they clicked something bad?

Ready to see where you stand? Let's book it.

Tell us a little about your setup and we'll confirm scope and a start date. Prefer to start free? The IT Health Check is a lighter first look.