External attack surface
What a stranger on the internet can see on your servers: open ports, outdated software, weak SSL and missing security headers.
Free checks for Canadian and US businesses
See your company the way an attacker does.
We find the exposed services, weak email settings and cloud misconfigurations that lead to breaches, explain them in plain language, and fix them for a fixed price.
- Read-only checks
- Report in 2 business days
- Fixed-price fixes
Can someone send email as you?
Checks your public DNS records only. Nothing on your systems is touched.
- PassRecords that are set up correctly
- WarnSettings that leave a gap
- FailMissing protection, with the exact fix
You get an A to F grade in about three seconds.
–
Want the full picture? Our free scans cover your web servers, Microsoft 365 and cloud too.
See all free checksChecks mapped to the standards your insurer and auditors ask about
- CIS Benchmarks
- SOC 2
- HIPAA
- ISO 27001
- Microsoft 365
- AWS
- Azure
Free checks
Five free checks. Each answers a question your insurer will ask.
Every check is read-only. Anything that touches your systems runs only after you confirm you own them, and you remove our access when the report arrives.
Email and identity exposure
Whether your domain can be spoofed, and whether staff accounts have turned up in known data breaches.
Microsoft 365 baseline
Is MFA really enforced, who holds admin rights, and is any mailbox quietly forwarding mail outside the company?
AWS and Azure security
Public storage, logging gaps and drift from CIS, SOC 2 or HIPAA controls across your cloud accounts.
Cloud cost review
What you're paying for but not using: VMs that are off but still billed, disks attached to nothing, idle IP addresses and load balancers, each with an estimated monthly cost.
Not sure where to start?
Tell us what worries you most. We'll suggest the one check that answers it fastest.
Request a free checkMost reports arrive within two business days.
Services
When the report finds something, we fix it.
You're never obliged to hire us. If you'd rather not do the work yourself, every finding maps to a fixed-price project or an ongoing plan.
Microsoft 365 hardening
A tested security baseline applied across your tenant: enforced MFA and conditional access, anti-phishing policies, sign-ins blocked from countries you don't work in, and alerts on risky mail forwarding.
Email authentication
SPF, DKIM and DMARC moved to enforcement in stages, so real mail keeps flowing while impersonation stops.
Cloud landing zones
AWS and Azure foundations built as code with Terraform or Bicep. Eligible projects may qualify for vendor partner funding.
Web and server remediation
Exposed services closed, patches applied, TLS and headers fixed, then a rescan to prove the grade went up.
Backup and recovery
Immutable backups tested on a schedule, and a written recovery plan sized to the downtime you can actually afford.
Managed security
Monthly rescans, patch oversight, phishing awareness tests and a named person to call, for one predictable monthly fee.
Downtime cost
What would a week offline cost you?
Ransomware recoveries for smaller firms commonly take days to weeks. Put in your own numbers to see the exposure in dollars.
Calculated in your browser. Nothing you enter here is sent anywhere.
How it works
From first check to proof it's fixed
- 1
Check
A free, read-only check, scoped in writing and run only against systems you've confirmed are yours.
- 2
Explain
A report written for whoever signs the cheques, with the technical detail attached for whoever runs IT.
- 3
Fix
Choose the findings you want handled. Each is quoted at a fixed price before any work starts.
- 4
Prove
We rescan when the work is done, so you see the grade change and keep the evidence for your insurer.
Book a review
Talk to a real person about your security
Tell us what you're worried about. Someone in Oakville, Ontario reads every message and replies within one business day.
- A plain-language answer, not a sales script
- The free check that fits your question
- A fixed price before any paid work starts
Prefer email? info@sjstechnet.com