[AD2] Tech
What we offerRequest a proposal
How we work

AEGIS is the process we run every engagement through.

It is why the assessment is thorough, gives the same answer every time, and fits a business that isn't a large corporation. This page explains what actually happens between the call and the report.

The five steps

Five steps. One report at the end.

Left to right. Nothing that identifies you leaves your building, and nothing is ever changed on your equipment.

01 · stage

Read

With read‑only access you approve, we read the settings on your firewall, internet connection, switches, Wi‑Fi and remote access. We first confirm every connection works, so the assessment cannot stall halfway. Nothing is changed. The raw copy stays on your site.

Read‑only access · settings only · nothing changed
→
02 · stage

Anonymize

Everything that identifies you — company name, device names, addresses, Wi‑Fi names, license keys — is swapped for a placeholder before anything is analyzed. The key to put the real names back is encrypted and never leaves your side.

Names replaced with placeholders · key stays with you
→
03 · stage

Check

Simple yes/no questions — are updates on, is the Wi‑Fi properly secured, is remote desktop open to the internet — are checked by a fixed list of rules. Every rule is tested to prove it catches the problem and stays quiet when there isn't one.

Best‑practice rules · same answer every time · no AI
→
04 · stage

Review

A partner reviews the anonymized settings and the rule results together, looking for the things a checklist cannot see: how problems combine, what matters most for your business, and what to do first. Software helps organize; it does not decide.

A partner's judgment · anonymized data only
→
05 · stage

Report

Your real names go back in, on your side. The result is a written report with a one‑page summary, every finding in plain language, and a 90‑day plan.

Real names restored on your side · Word + PDF
→
Your data stays yours

Your real data never leaves your network.

This is the most important part of this page. Most providers say "we'll install our tools on your network." We do the opposite. The reading happens on your side, the anonymizing happens on your side, and the key that maps placeholders back to real names stays on your side.

At your site

Where the real data lives

  • Your actual device settingsstays here
  • The key that maps placeholders to real namesencrypted
  • Doors opened into your networknone
Where we do the analysis

Anonymized only

  • Settings with every name replacedok
  • Best‑practice checks and partner reviewok
  • Your customer's name, anywherenever

Plainly ·Your name, your customers' names, your addresses, your license keys — none of that is what gets analyzed. Only the anonymized copy is. Real names go back in on your side, at the end.

The four levels

What critical, high, medium, and low actually mean.

In business terms. If it doesn't explain itself to an owner who isn't technical, it doesn't belong in the report.

LevelWhat it means for the businessRemediation window
criticalA realistic path to a serious incident — locked files, lost data, a lawsuit — is open right now.within 14 days
highA known weakness that would make a bad day much worse if something else went wrong first.within 60 days
mediumMakes the business less resilient or costs more than it should. Not urgent; worth scheduling.this quarter
lowGood practice. Worth doing when convenient; won't hurt you if you don't.when convenient
What a finding looks like

One sample finding. Real shape, made‑up company.

Every finding in the report follows this exact structure. A full report has 40–120 of them, grouped and ranked.

F‑003

Remote desktop on the accounting server is reachable from the internet.

Critical
What we foundA rule on the main office firewall, added in 2023, lets anyone on the internet reach the remote‑desktop login on the accounting server. It only asks for a username and password. Sign‑in attempts from unknown addresses appear in the log every day.
Why it mattersThis is the most common way businesses of this size get locked out of their own files and asked for a ransom. One guessed or reused password is enough. Typical recovery: six to nine weeks of disruption.
What to doRemove the rule. Staff who need the server from home connect through the company VPN instead, which already exists and asks for a second factor. Confirm the three people who used the old route can still work.
Effort
~1 hr
Includes a short check‑in with the three affected staff.
See the full sample report
What you see / don't see

AEGIS is how we work. It is not software you buy.

There is no dashboard to log into. No portal. No subscription. You bought an engagement and the people who run it.

A short call
×Our tools
The report
×Our checklists and rules
A walkthrough of the findings
×Logins or dashboards
A 90‑day plan
×A subscription