Step 02 · Remediate

2A Cyber Harden

Your Check produced a ranked list of fixes. Harden is us doing some or all of them, as a scoped project with a fixed quote. It is never required: the report is yours, and any competent IT team can work from it.

Typical work

The fixes that remove the most risk first.

Every project is quoted from your Check findings, so the scope is real before you sign.

  • Enforce MFA everywhere it matters, including admins and remote access.
  • Harden Microsoft 365 or Google Workspace: sharing, mail rules, legacy protocols, audit logs.
  • Configure SPF, DKIM and DMARC and move DMARC to enforcement, so receiving servers can reject more mail that spoofs your domain.
  • Deploy or reconfigure endpoint protection on every device.
  • Build backups that are isolated from ransomware, and prove they restore.
  • Remove stale accounts, shared logins and excess admin rights.
  • Put vendor remote access behind named, reviewable accounts.
  • Write a one-page incident plan your staff can actually follow.

How Harden works

Scoped from evidence. Approved by you. Checked at the end.

  1. Scope

    We propose which findings to address, what is excluded, and a fixed price, in writing.

  2. Split the work

    You decide what your IT provider handles and what we do. We coordinate dependencies with them.

  3. Implement

    We work alongside your provider or staff and document everything we change.

  4. Validate

    Each finding is re-checked against the validation criteria in your report.

Price
Typically $3,500 to $10,000, quoted as a fixed project from your Check findings. Harden is scoped and priced separately and is not part of the $995 Check.
Prerequisite
A 2A Cyber Check, or an equivalent recent assessment we can verify.
Working with your IT
We work alongside your existing IT provider or staff, and document everything we change.
Result
A before-and-after summary showing each finding and how it was resolved.
Not included
Software licenses and hardware, which you buy directly; day-to-day IT support; and work outside the written scope unless you approve a change in writing.

Harden starts with a Check. Start there.

A 2A Cyber Check gives you an independent view of your security posture, the evidence behind every finding, and a prioritized plan for what to fix first.