Loading…
Services · Tech
Cyber security audit
An honest, plain-English health check of how safe your business actually is, and a clear, prioritised list of what to fix first. The sensible first step before spending a penny on security.£900 to £3,500
What cyber security audit actually means
A cyber security audit is an honest, structured look at how safe your business actually is right now, followed by a plain-English report of what is exposed and what to do about it, in order of what matters most. It is not a sales pitch dressed up as a check, and it is not a thousand red warnings designed to frighten you into buying. It is the same thing a good mechanic does before recommending work: find out what state you are really in, then tell you straight.
Most small and mid-sized businesses have no clear picture of their own security, and understandably so, because nobody has ever looked at the whole thing at once. The passwords, the backups, the software that is out of date, the accounts of people who left months ago, the supplier who has access to your systems, the staff habits that quietly leave the door open, these sit in different places and nobody owns the overall view. An audit is the first time someone stands back and sees all of it together.
We work through the areas that actually get businesses breached: your accounts and passwords, your email, your backups and whether they have ever been tested, your devices and updates, who has access to what, and the human habits that attackers rely on. Then we write it up plainly, ranked from the things to fix this week to the things that can wait, with the reason for each, so you can act on it yourself, hand it to your existing IT people, or ask us. There is no obligation to buy anything.
See it work
Rather than take our word for it
Real, or a scam? Sort each email and see the tells you can teach your whole team.
Sort each one
0/7 rightYour July storage summary
Team lunch on Friday
Order 4471 confirmed, dispatching tomorrow
Verify your account within 24 hours or lose access
Updated bank details for your July salary
Parcel held, small fee due, see attached
Unusual sign-in detected, confirm it was you
A scripted demonstration using made-up emails. In a real phishing simulation we send safe test emails to your team and report, privately, who needs a hand.
How it helps your business
The first benefit is simply knowing, instead of hoping. Most owners carry a low, nagging worry about security precisely because they cannot see it clearly, and that uncertainty is its own cost. An audit replaces the worry with a clear picture: here is where you are genuinely exposed, here is where you are fine, and here is the order to deal with it. Certainty, even when it uncovers problems, is far easier to act on than vague dread.
The second is that it stops you wasting money on the wrong security. The industry is full of products sold on fear, and it is easy to spend heavily on something that does not address how your business would actually be broken into, while leaving the real gap wide open. An audit finds the actual weaknesses first, so any money you then spend goes on what genuinely reduces your risk, in the right order, rather than on whatever was marketed hardest.
The third, and the one that matters most, is catching the serious gap before an attacker does. A large share of business breaches come down to a handful of avoidable things: an untested backup, a reused password, a missing update, an old account never closed. Finding and fixing those before they are exploited is the difference between a quiet Tuesday and the kind of incident that can genuinely end a small business. The audit is cheap insurance against a very expensive day.
What is included
- A plain-English review of where your business is genuinely exposed
- Covers your systems, accounts, backups, staff habits and suppliers
- A prioritised report: what to fix now, soon and later, and why
- No jargon, no scare tactics, and no obligation to buy anything from us
- The honest first step before spending on security
Real examples
Illustrative cases. Tap one to see what happened and what could have been done.
The backup that had never been tested
The case
A firm believed it was well protected because it paid for backups, so security had slipped down its list of worries. In reality the backups had never once been tested, and were not actually restorable. A ransomware attack or a failed server would have wiped everything out, with nothing to fall back on, and nobody had ever thought to question it.
What could have been done
A simple check would have caught it long before any incident: confirm the backups actually restore, fix them so they do, and set a schedule to test them regularly. Verifying a backup costs almost nothing, and far less than the disaster it prevents. That one overlooked thing mattered more than any security product they could have bought.
The doors left open by people who had left
The case
A growing business had taken on and lost staff over a few years with no process for closing accounts when someone left. The result was a string of live logins belonging to people long gone, each one a way into the business that nobody was watching or even aware of.
What could have been done
Reviewing who has access, and removing an account the moment a person leaves, would have shut every one of those doors. A short leaver checklist keeps it from ever building up again. It costs nothing beyond the discipline to do it, and it closes a serious exposure that had been sitting invisible for years.
Ready to sort cyber security audit?
Tell us what is going wrong and we will come back with a fixed price in writing, after a short scoping call. No obligation, and no jargon.
Common questions about cyber security audit
How much does cyber security audit cost?
£900 to £3,500. We agree the exact number before any work starts, so there are no open ended day rates.
How long does cyber security audit take?
Most work of this kind is live within three to four weeks. We give you a date before we begin and tell you early if anything threatens it.
Do you work outside Edinburgh?
Yes. We are based in Edinburgh and work on site across the Lothians, Fife and Glasgow, and remotely across the United Kingdom.
Cyber security audit in your area
Same service, same prices, wherever you are. On site across central Scotland and remotely across the rest of the UK.
Cyber security audit in EdinburghCyber security audit in LeithCyber security audit in FifeCyber security audit in Livingston and West LothianCyber security audit in GlasgowCyber security audit in DundeeCyber security audit in Aberdeen and the north eastCyber security audit in StirlingCyber security audit in FalkirkCyber security audit in Perth and PerthshireCyber security audit in LondonCyber security audit in ManchesterCyber security audit in BirminghamCyber security audit in LeedsCyber security audit in LiverpoolCyber security audit in SheffieldCyber security audit in BristolCyber security audit in Newcastle upon TyneCyber security audit in NottinghamCyber security audit in LeicesterCyber security audit in CoventryCyber security audit in CardiffCyber security audit in SwanseaCyber security audit in BelfastCyber security audit in SouthamptonCyber security audit in BrightonCyber security audit in ReadingCyber security audit in Inverness
Related tech services
AI audit
Find out what AI your staff are already using, what business data might be leaking into it, and whether any of it is safe, before it becomes a problem. Plain-English, no hype, no obligation.
VoIP and cloud telephony
Business phone systems that follow your team anywhere. Number porting, call routing, voicemail to email, and call recording where you need it.
Dialler systems
Predictive, progressive and preview diallers for outbound teams. Set up, tuned, and kept compliant with Ofcom rules on abandoned calls.
Transcription and call intelligence
Every call, meeting and voice note turned into searchable text, with summaries and actions extracted automatically. Accurate on strong regional accents.
AI automation
The repetitive work handed to a machine. Quote to invoice, document processing, chasing, routing and reporting.
Admin Rescue
Stop missing calls. Stop quoting at midnight.