// 01
🌑
Dark Web Exposure Check
Search if your company's emails, passwords, or data are already leaked and circulating on the dark web, before attackers use them against you.
HaveIBeenPwnedDeHashedIntelX
// 02
📧
Email Security Audit
Check if your email domain has SPF, DKIM, and DMARC records set up correctly. One misconfiguration means anyone can spoof your business address.
MXToolboxSPF/DKIM/DMARC
// 03
🌐
Website Security Report
Check your website's SSL certificate health, missing security headers, and basic vulnerabilities, the gaps attackers scan for before targeting a business.
SecurityHeaders.comSSL LabsMozilla Observatory
// 04
🔍
Digital Footprint Report (OSINT)
Map what's publicly visible about your company and employees, including exposed names, emails, phone numbers, roles, and locations attackers collect before striking.
Google DorkingMaltegoHunter.io
// 05
🎣
Phishing Risk Assessment
Evaluate how exposed your business is to phishing, including email filtering gaps, employee awareness, and spoofable addresses. CPPS certification covers this directly.
CPPS CertifiedRisk Report
// 06
🔑
Password Policy Review
Review whether your team has a password policy, uses password managers, and whether any accounts are running on weak or reused credentials.
Policy AuditRecommendations Doc
// 07
📱
Social Media Security Audit
Check if your social accounts have 2FA active, if former employees still have access, and if sensitive business details are accidentally exposed in posts or bios.
2FA VerificationAccess Review
// 08
🔎
Google Dorking Report
Use advanced Google search operators to find sensitive files, login pages, or internal company data that is accidentally indexed and visible to the public.
Google DorksExposure Report
// 09
🎓
Security Awareness Training
A 30–60 minute live or recorded session for your team covering phishing recognition, password hygiene, safe browsing, remote work risks. Includes a one-page cheat sheet.
Zoom / SlidesTeam Session
// 10
☁️
Cloud Account Security Review
Review your Google Workspace or Microsoft 365 admin settings including admin access levels, 2FA enforcement, guest permissions, and inactive legacy accounts.
Google WorkspaceMicrosoft 365
// 11
🏠
Remote Work Security Checklist
Assess whether remote employees use VPNs, avoid public Wi-Fi, and keep company data off personal devices, then document every gap with remediation steps.
VPN AuditGap Report
// 12
📋
Cybersecurity Policy Writing
Write your password policy, acceptable use policy, and data handling policy from scratch. Most small businesses have none, leaving them exposed legally and operationally.
Password PolicyAcceptable UseData Handling
// 13
🚨
Basic Incident Response Plan
A clear written document: what to do if you get breached: who to call, what to preserve, how to report, and how to contain the damage fast.
IR DocumentStep-by-Step
// 14
🔐
Two-Factor Authentication Audit
Systematically verify 2FA is active across all critical accounts including email, banking, social, and hosting, and document every account where it's missing.
2FA VerificationAccount Inventory
// 15
💾
Backup & Recovery Review
Verify whether your data is backed up, where it's stored, how often it runs, and whether you can actually restore it. The one test most businesses fail.
Backup AuditRecovery Test