PROBLEM
You need to know what is open, misconfigured or ownerless — before buying another tool or certificate.
PODEJŚCIE
Agreed scope, technical inspection, prioritised findings with rationale, and recommendations you can implement.
SCOPE
- configuration review of systems and services
- exposure (listeners, VPN, remote access, admin panels)
- accounts, privileges and recovery paths
- findings report with scope limits
DELIVERABLE
- written scope and limits
- prioritised findings (critical / important / later)
- recommendations with technical rationale
PROCESS
- agree scope and access
- collect facts (config, scan, interview)
- analyse and prioritise
- report and next-step discussion
A security assessment only pays off with an explicit scope: which hosts, which networks, which accounts, how much time, which constraints. Without that you get a tool list, not a picture of risk.
I review configuration, service exposure, privileges and agreed controls. Findings are split into facts, risks and recommendations — with priority and a short rationale so you can decide: fix now, schedule, or consciously accept.
This is for organisations and individuals who need a decision-ready view of state before investing in SIEM, VPN, MFA or a larger hardening project. Methods follow the scope (config review, listener inventory, account checks) — I do not sell a “9/10 score”.
This is not a guaranteed pentest, CERT audit or ISO conformity assessment — unless that work is written into scope and named explicitly.