Inside confirmed

Inside, confirmed by your team.

Our reading is from outside. What only your own people can see, they check themselves: each person on your list gets a short email on your schedule with a few things to look at in their own email account and records what they found here with the date. You get an email at once if anyone finds something or could not do a check.

No loginNo installNo mailbox accessOne dated record
01 · Why

Some things no outside reading can settle.

Inbox rules, connected apps, a second sign-in step, who signed in. We never go inside your email or systems, so your own people check them.

These are your team's own confirmations, each with its date. We do not go inside your email or systems, so we have not checked them. They are not findings and they do not change your count of ways in or your rating.

02 · What your team checks

A few things, each with the place to look.

Once a month the list sent to you also asks about accounts of former staff, the list of admins, a backup test, what your email AI assistant may do with mail from outside, your office computers and your office network.

Inbox rules and forwardingReview your inbox rules and forwarding.
Apps connected to the accountReview the apps connected to your email account.
A second sign-in stepCheck that a second sign-in step is on.
Recent sign-in activityCheck that recent sign-in activity looks like you.
Requests to change payment detailsWas every request this time to change payment details confirmed by calling a number already on file?
Accounts of former staff (monthly, the owner)Check that accounts of former staff are switched off.
The list of admins (monthly, the owner)Check the list of admins.
Backups tested (monthly, the owner)Test a backup.
What your email AI assistant may do with mail from outside (monthly, the owner)Check what your email AI assistant may do with mail from outside: it should summarize only, never act on a request inside an email (a payment change, a new bank account, a link to sign in) and anyone at the firm who sees a payment change in an AI summary confirms it by a phone call to a number already on file.
Office computers (monthly, the owner)Every office computer installs updates automatically, including the maker's firmware tool on Windows laptops and each person signs in with their own account (no shared password on the front-desk computer).
Office network (monthly, the owner)The office router or firewall is on its maker's latest firmware, its admin password is not the default and printers, cameras and other devices are not reachable from the internet.
03 · How often

On your schedule.

ScheduleWeekly on Monday, or monthly on the first working day. The owner chooses.
WhoThe people the owner lists, at addresses at the firm's own domain, up to 25.
The linkEach person gets a personal link by email. No account is needed.
ReminderOne reminder 3 working days after the send to anyone not done. Nothing more.
AlertAn answer of found something, could not do it, or a payment change not confirmed by a call alerts the owner at once.
IncludedThe inside checklist comes with a paid assessment or monitoring.
04 · What we never access

Your team checks. We never go inside.

The inside checklist is your own team's check, on your schedule: we never access your mailboxes or systems and a completed checklist is your team's confirmation, not something we verified.

  • NoYour mailboxes or your systems
  • NoA screenshot or a file: answers and dates only and a note is cleared 12 months after it was written
  • NoYour count of ways in or your rating: your team's answers are not findings
Check my firm

See what your firm shows the internet, without handing over a key.

Your domain and a work email at it. No password, no login and no software. Read-only and sent only to your work email.