I bought a security audit

Scope purchase

Stripe Checkout completes the order. North American billing supported, with CAD or USD pricing depending on the card issued. Payment confirmation arrives within a minute.

Confirmation and audit scan

You receive an intake email within a minute confirming payment. Our scan runs in the background — checking roughly 10 sources for credential exposure, breach databases, paste sites, domain impersonation, and infrastructure tied to your company. No action required on your side.

Audit Ready notification

Subject: "Your forensic audit for [your company] is complete." The email contains a permanent link to your audit dashboard — bookmark it. No password required.

Findings review

Findings are grouped by severity (Critical, High, Medium, Low). Each finding has a plain-English description and concrete remediation steps embedded inline. This is where you assess which items you can handle internally and which require specialist support.

Remediation path selection (DIY or Implementation)

Two paths and you can mix them per-finding:

• DIY — follow the remediation steps inside each finding yourself (or hand them to your IT person). Best for simple things: rotating a password, enabling MFA, updating a DNS record.
• Work them yourself. Every finding in your dashboard carries the exact change that closes it, with the command to verify it afterwards. Mark it fixed and we re-check it for you. If you have an IT provider, use Forward to IT to send them the finding, the fix and the reproduction step in one email.

Remediation is performed

Whichever path you chose, the actual remediation happens here — you, your IT, or our contractor implements each change. No need to declare in advance which findings you will handle yourself versus which you will outsource. You can decide per-finding as you go.

Mark fixed and reverification

Click "I've done this" on a finding once it's fixed, then click Reverify. We re-check the same source the finding came from. Status flips to Resolved (gone), Mitigated (historical record, credential rotated), or Still present with a note on what remains. Repeat per finding.

Next steps

From here most customers do two things: work through the findings in the dashboard, each of which carries the change that closes it, and activate Continuous Monitoring so new exposures are caught as they appear rather than at the next audit.