Find the weak spots before someone else does.
Regular, non-intrusive scanning of your systems, websites and cloud services, with every finding rated Critical, High, Medium or Low and a plain-English fix for each. Quarterly scans keep you compliant; monthly scans keep you ahead.
Delivered by CRIBB Cyber Security, the assurance arm of the Clipeum group
5 kinds of scan
Internal
Your servers, workstations and network devices, scanned from inside for missing patches, weak configuration and known flaws.
External
Everything you expose to the internet, scanned the way attackers scan it, every month or every quarter.
Web applications
Your websites and portals checked for common application weaknesses and outdated components.
PCI DSS
The official quarterly scan of your payment systems that requirement 11 of PCI DSS demands, with the report your bank or acquirer needs.
Personal data (PII)
A search of your file shares and systems for unprotected personal data that needs anonymising, moving or locking down under GDPR.
Cloud configuration
AWS, Azure, Google Cloud, Oracle and Alibaba environments checked against best-practice benchmarks.
Two reports, one fix list
Every scan produces a management report that tells leadership where you stand in a page, and a technical report that tells your engineers exactly what to change, host by host. Findings are rated by severity and by how easy they are to exploit, so the list starts with what matters.
Fixes can be actioned by your own IT team or by our engineers as a trusted fixer. Either way, we rescan to confirm they've landed.
When to scan
- Quarterly, as a minimum, for anyone taking card payments
- Monthly if you're in a regulated sector or hold sensitive data
- Before and after Cyber Essentials Plus, so you pass first time
- After every significant change to your network or website
- Continuously if you're on AISP or our Cyber Security Ready programme
- Whenever a customer or insurer asks for evidence
Scanning questions
Will scanning disrupt our systems?
We already have antivirus and a firewall. Why scan?
What do we get?
Talk to a person who knows IT, not a script.
Tell us what's frustrating you about your IT or security. We'll give you an honest view of what we'd change, whether or not you work with us.