01
Internal and External Network Assessment
A scan of your internal and internet-facing hosts, followed by a second pass in which an analyst verifies each preliminary finding.
Scoped by host count
BappleTech delivers fixed-fee security assessments for your network, websites, wireless and user accounts. Every finding is checked by an analyst, rated by severity and paired with a recommendation.
Each service stands alone or combines into a single engagement with one report.
A scan of your internal and internet-facing hosts, followed by a second pass in which an analyst verifies each preliminary finding.
An optional, non-destructive follow-on to the network assessment that shows how much real exposure a verified weakness creates. You decide which systems are off limits.
A review of your websites against the OWASP Top Ten web application security risks, with findings verified by an analyst. Signed-in testing is available.
An evaluation of the wireless networks at one location: how well they are protected, whether the guest network is kept apart from company resources, and how the setup compares with best practice.
A measure of how strong the passwords in your Windows Active Directory domain really are, reported as overall strength and the share that fall short. For on-premises and hybrid directories.
A check of public breach data for accounts tied to your organization's email addresses, with the relevant details for each one found.
A read-only review of firewall design, coverage and configuration against industry-standard guidance, ending in observations, recommendations and immediate action items.
An authorized, simulated email campaign for your staff. Templates and timing are reviewed with you before anything is sent.
Once your team has worked through the first report, a repeat scan of the network or website confirms the fixes held.
We look past individual findings for the patterns behind them: gaps in process, inconsistencies and design weaknesses. Each finding is rated on a four-level scale so the order of work is clear.
Nothing starts until you have signed a written authorization, and you are told before each scan runs.
We confirm scope, timeline and contacts, review your environment and change-control process, and agree what success looks like.
We run the agreed assessments at the scheduled times. Automated results are reviewed and validated by an analyst before they count as findings.
We deliver the final report, review it with you, collect your feedback and get your sign-off.
A short list, settled before kickoff, keeps the engagement on schedule. Plan on about two weeks' notice to book the work.
Share a rough count of hosts, websites, wireless networks and domains and we will come back with a fixed-fee quote.