Find out how well your business is protected from hackers — for free

In one business day you get an A–F grade and your top three risks in plain language — no obligation.

  • Legal methods only
  • Contract and NDA
  • Your data is encrypted and deleted after the work is done
  • Aligned with EU, Ukrainian and US standards (GDPR, NIST, ISO 27001)

What’s at risk

It’s usually not banks that get hit, but ordinary companies. Here are the four scenarios we see most often.

1

Bank details swapped in an email — money goes to fraudsters

Your accountant gets an “invoice from a supplier” with a new account number and pays it. The money is gone.

2

Website hacked — Google shows a warning

Customers see a red warning screen instead of your site. Orders stop and your reputation suffers.

3

Server encrypted — accounting stands still

Ransomware locks your files and demands payment. Without backups, work stops for days.

4

Customer database leaked — fines and lost trust

Customers’ personal data ends up online. That means regulators, complaints and customers leaving.

Real cases

Well-known incidents from public sources: what happened, why, what it cost and what would have prevented it.

Business email compromise (BEC)

What happened
An accountant receives an “email from a supplier” with a new bank account.
Why
No email protection (DMARC), a hacked mailbox, bank details not confirmed by phone.
Cost
Over $3 billion lost in the US alone in 2025 (FBI)
Protection
DMARC, two-factor login for email, a call-back rule before payments.
Source: FBI IC3, 2025 Internet Crime Report

NotPetya via M.E.Doc, 2017

What happened
Malware arrived in an accounting software update and wiped data at thousands of companies.
Why
The vendor’s update was compromised; it then spread through networks via a Windows flaw.
Cost
Global damage — over $10 billion
Protection
Windows updates, network segmentation, offline backups.
Source: Wired

Attack on Kyivstar, 2023

What happened
Millions of subscribers lost service; businesses were hit too.
Why
According to Ukraine’s SBU, the attackers stayed unnoticed in the network for months.
Cost
About $95 million (VEON estimate)
Protection
Security event monitoring, control of admin access.
Source: DOU

Equifax, 2017

What happened
Personal data of 147 million people was stolen.
Why
A fix for the software came out in March but was never installed.
Cost
Up to $425 million for affected people from the settlement alone
Protection
Timely updates, regular scanning.
Source: FTC

Log4Shell, 2021

What happened
A flaw in a widely used library let attackers take over servers remotely.
Why
The library was inside thousands of programs, and owners didn’t know where.
Cost
Mass attacks worldwide within days
Protection
An inventory of all software and fast patching.
Source: NIST NVD

How we work

  1. 01

    Free express check

    We look at your business through an attacker’s eyes from outside. You get an A–F grade and your top three risks.

  2. 02

    Call and contract

    We agree what to test, timing and price. We sign a contract and an NDA.

  3. 03

    Assessment and report

    A plain-language report for management and a detailed one for IT, with priorities.

  4. 04

    Fixes and retest

    We fix the findings ourselves or with your IT team. The retest is free.

Services and pricing

Indicative ranges in US dollars. The exact price follows a free scoping call and is fixed in the contract.

Express check

An A–F grade and your top 3 risks.

1 dayFree

External check of website and servers

A report on what an attacker sees from the internet and how to close it.

2–4 days$150–350

Email anti-fraud protection

Nobody can send fake emails in your company’s name.

1–2 days$70–180

Router and network equipment hardening

Any vendor: we close unneeded entry points, update firmware and set up secure access.

1 day$70–220 per device

Office network assessment

Computers, Wi-Fi, servers and access rights — up to ~30 workstations.

3–6 days$350–900

Website security testing

We look for vulnerabilities in forms, login and user areas using the OWASP methodology.

3–7 days$450–1,100

Company digital footprint (OSINT)

What open sources reveal about your company — leaked passwords, documents, internal data — and how to remove it.

5–10 days$250–600

Executive personal cyber hygiene

A review of your own digital footprint and a plan for what to close.

3–5 days$150–350

Staff training

Phishing drills and a one-page guide for staff.

2–3 weeks$5–9 per person, from $70

Fixing vulnerabilities

We fix what we found and test it again.

By scope$16–27 / hour

What does one day of downtime cost?

Do the maths yourself and compare it with the price of a check.

Lost revenue$3,600

Cyber check-up

Like a regular car inspection, but for your website and network. Ongoing checks, an A–F grade, a risk report and a free retest after fixes.

Basic

$45–80 / month

  • Monthly external check
  • Certificate and domain monitoring
  • Report with an A–F grade

Business

$335–560 / month

  • Everything in Standard
  • Event log analysis
  • Incident response within 4 business hours
For technical specialistsMethodologies, report format, severity scoring, tools

Methodologies

OWASP WSTG and ASVS for web applications, CIS Benchmarks for servers and network equipment, NIST CSF for process assessment, PTES as the overall testing framework.

Report format

Executive summary, findings scored with CVSS 3.1 / 4.0, evidence, reproduction steps, prioritised recommendations, retest results.

Networks and equipment

Configuration review of network equipment from any vendor (MikroTik, Cisco, Ubiquiti and others) against CIS Benchmarks: segmentation, firewall rules, remote access, Wi-Fi.

OSINT

Only about the client themselves: their company and them personally. Passive collection from open sources under contract. Recommendations aligned with GDPR, Ukraine’s personal data law, NIST CSF and ISO/IEC 27001. Data is stored encrypted and deleted when the work is complete.

Sample report

An anonymised sample report is available on request.

About us

A team of cybersecurity engineers

We set up and secure company networks: routers, switches, Wi-Fi and servers from any vendor. We explain risks in business language and do the fixes ourselves. Every project has one responsible engineer, so you always know who to talk to.

Team certificationsGoogle Cybersecurity Professional CertificateCoursera, 2026 · verification link on request
Official, under contractCompany details are in the contract and invoice

Questions and answers

Is this legal?

Yes. The free check only reviews what anyone can see from the internet. Everything else we do only under a written contract with the system owner.

Won’t you break my website while testing?

No. We use careful methods and agree the timing with you so your business keeps running.

What happens to the data you see?

We sign an NDA. Reports are delivered encrypted, and working data is deleted within the period set in the contract.

Why is the express check free?

So you can see the value before paying anything. There is no obligation afterwards.

Can you find information about any person?

No. We only assess your company and you personally — the person who orders and signs the contract. We do not research other people or companies.

How long does it take?

The express check takes one business day. Timelines for other services are on the price cards.

Do you guarantee we won’t be hacked?

No, and we say so honestly: nobody can promise 100% protection. We significantly reduce the risk and verify the result with a retest.

How do payments work?

By bank transfer under a contract and a certificate of completed work. International clients can pay in USD or EUR.

Where do you work?

Remotely, with clients in Ukraine and abroad. For on-site work we travel anywhere in Ukraine.

Request a check

Fields marked * are required.