Simply choose between Cyber Essentials or CIS Cyber assessment frameworks and complete your assessment. The questions are tailored around the specific controls of each framework. At the end of the assessment you’ll receive a breakdown of scores for each control with a list of actionable items to achieve 100% compliance. Your scores are adjusted as you implement the suggestions and mark them as complete.

A “breach” is an incident where data is inadvertently exposed in a vulnerable system, usually due to insufficient access controls or security weaknesses in the software

Our service will search repositories and databases of information collected on known data breaches, to detect whether your information has been exposed. Detections and details are listed against the affected email address.

Yes. Active monitoring starts as soon as you add an email address to our breach monitoring service.

We provide details on the source of the data breach, a description of the leak, dates, number of users impacted, and the data types that were exposed (usernames, passwords, etc.)

No. For security reasons, passwords are not retrieved or stored in our databases.

Breached data is lifted almost exclusively from underground sites and marketplaces, commonly known as the dark web. The information returned by our searches is from known and confirmed data breaches.

When you search for an email address, you may see that address appear against breaches of sites you don’t recall ever signing up to. There are many possible reasons for this including your data having been acquired by another service, the service rebranding itself as something else or someone else signing you up.

No. Once a data point such as a password or credit card number has been exposed to the internet, it’s no longer safe. It could have been shared and downloaded thousands of times on underground sites. Using a detection service provides insight into your compromised data and allows you to take action to mitigate the risk.

Vulnerability scanning is the process of scanning a network or system to identify any existing security vulnerabilities. It is a proactive measure used to detect any weaknesses that an attacker may exploit to gain unauthorised access to a system or network.

We conduct vulnerability scanning on your selected public IP addresses, scans are carried out according to your plan frequency. Reports are uploaded into the vulnerability scanning app. An email alert will be generated when a new report is available.

A vulnerability scan is a proactive security practice that helps you identify common vulnerabilities and exposures (CVEs) on your networks. The scanner needs to freely scan each port to be able to identify areas of weakness and exposures. Intrusion prevention systems and firewalls often block vulnerability scanners as they scan a network. This is great for unwanted traffic, but a scheduled vulnerability scan is not unwanted traffic. The scanner will only be able to see public facing open ports, by whitelisting the IP you are allowing the scanner to freely check those ports.

Hackers typically won’t run a scan against your network to check for open ports, they will target known vulnerabilities on specific ports. If your firewall stops the scanner from running it only stops potential vulnerabilities from being identified, leaving them open to exploitation.

Each plan provides with a maximum number of IPs and scan frequency. Paid plan users can upgrade the number of IPs or change the scan frequency. Please contact us to find out more.

The frequency of scans will depend on the size, nature and role of the network. It is recommended to conduct scans every 1-3 months.