Before you invest

Understand where your company stands before spending on security

Not every review is the same. Here we explain three distinct scopes so you know which one applies to you and what to expect from each.

Chat on WhatsApp

What it's for

To know the state of your company's security and decide, with information in hand, what to address first, instead of buying tools on a hunch.

What it helps you avoid

Moments when an assessment makes sense:

You don't know whether what you already pay for in security is properly configured.
A client or partner asked you for evidence of your security practices.
You're planning the year's budget and don't know where to start.
There was an incident and you want to know what else is exposed.
Someone offered you a solution and you don't know whether you really need it.

What Waxxor does

There are three distinct scopes. It's worth not confusing them.

1. Free diagnostic

A conversation to get to know your company and review, in broad terms, where you stand with respect to the solutions Waxxor offers. No cost, no commitment. It is not a full audit or a penetration test.

2. Comprehensive prevention assessment

A paid service, deeper than the diagnostic and focused on prevention. Content, coverage and deliverables are defined in the proposal.

3. Technical vulnerability analysis

A technical review of the assets agreed on. Scope, assets included and deliverables are defined in the proposal.

What's included and what isn't

What it normally includes

The free diagnostic is a conversation, at no cost and with no commitment.
The comprehensive prevention assessment and the technical vulnerability analysis are paid services, with a written proposal.
Each proposal states what gets reviewed, how it gets reviewed and what you receive at the end.

What's worth making clear

The free diagnostic is not a penetration test or a full audit.
A prevention assessment does not automatically include technical testing: they are separate scopes and are contracted separately.
We do not publish prices on the site. We share them in the proposal, based on the agreed scope.
No assessment guarantees that nothing went undetected. A review describes a given moment and a given scope.

The technology behind it

Depending on the scope, the assessment draws on interviews with your team, configuration review and technical testing. What applies in your case is stated in the proposal.

Interviews

Conversations with the people who operate the systems, to understand how work actually happens and not only how it is written down.

Configuration review

A review of how what you already have is configured: identities, email, devices, backups and access, according to the scope.

Technical testing

When the scope includes it, a technical review of the agreed assets. It is not included by default in every scope.

Frequently asked questions

Does the free diagnostic have any hidden cost?

No. It is a conversation at no cost and with no commitment. If a service comes out of it, we propose it in writing with its scope and its price.

Which of the three do I need?

You normally start with the free diagnostic. That conversation leads to a recommendation: a prevention assessment, a technical analysis, or neither of them for now.

Does the assessment include penetration testing?

Not automatically. Penetration testing is a separate service, with its own scope and its own proposal.

How much does it cost?

It depends on the scope. We don't publish prices because they vary with the size of the company and with what gets reviewed. We state it in the proposal.

See all services

Secure email and files

We configure and harden Microsoft 365 to reduce email fraud, improper access and exposure of your files.
SentinelOne protection

We implement and configure SentinelOne on your company's computers and servers, and follow up on the alerts.
Backup and recovery

Copies of your information protected against modification or deletion, with quarterly restore testing.
Security awareness

Workshops and good practices so your team recognizes and reports fraud attempts, with phishing simulations according to the contracted program.
Penetration testing

An authorized exercise to find, in a controlled way, what an attacker could take advantage of. Every project is designed with its own scope.

Start with the conversation at no cost

From there comes the recommendation of which scope suits you, or whether you need neither for now.