Home / Services / Security Assessments

Security Assessments

Know what to fix first.

We review how your systems are built, rank what we find, and give your team a plan.

Fixed-scope assessment and readout. Remediation and additional testing are separate engagements.

Scope an Assessment See a Sample
What You Get

A report your team can act on.

  1. Consequence first

    Ranked by what it means for you.

  2. Evidence you can check

    The exact setting behind it.

  3. Steps your team can run

    In order, with effort and owner.

  4. Proof it is fixed

    How you show it is done.

SampleSynthetic data. Not a client finding.
Example Resort (fictional) Findings
F-01 Priority 1: fix first

Guest Wi-Fi can reach the camera recorders

Consequence
A guest could reach the recorders' sign-in page. Footage could be stopped or deleted.
Evidence
Firewall rule 14 lets guest Wi-Fi reach the camera network on any port.
Fix
  1. Block guest traffic to cameras.
  2. Allow recorder admin from one approved workstation.
  3. Schedule with the camera provider.
Done when
Guest Wi-Fi can no longer connect to the recorders.
Effort Low Owner Network team Risk Low
Also in this report
IDFindingPriority
F-02Shared admin account on point-of-sale servers1
F-03Vendor remote access left on2
F-04Switches managed without encryption3
Deliverables

Six things you keep.

Architecture review

How systems connect, and where trust is too wide.

Configuration review

Settings checked against current baselines.

Ranked findings

Ordered by consequence to your operation.

Remediation plan

Steps, effort, and proof of fix.

Readout

A working session with your team.

Yours to keep

Report, evidence, and documentation.

Process

How it runs.

  1. ScopeAgreed in writing.
  2. AccessNamed accounts you can revoke.
  3. ReviewArchitecture and configuration are reviewed using authorized access and the data-handling arrangements agreed for the engagement.
  4. ReportRanked findings, each with a fix.
  5. ReadoutWe walk your team through it. Done.
Scope

What it covers.

Included

  • Network design and segmentation
  • Firewall, switch, and server settings
  • Admin access and identity
  • Remote and vendor access
  • Ranked plan and readout

Separate engagements

  • Doing the fixes
  • Additional testing
  • Ongoing support
Who Does the Work

Engineers who learned on casino floors.

We review how systems are really set up, not how they are drawn. We have disclosed findings to vendors and fixed them in production.

Team credentials: CASP+, CySA+, CSIE, CSAE, CNSP, CCNA

Casinos and tribal gamingTribal governments and enterprisesHotels and resorts
Next Steps
  1. Tell us about your environment.
  2. Get a written reply.
  3. Agree scope and price in writing.

Confidential briefing. One reply from a senior engineer. No drip campaigns.

Scope an Assessment Email Us
Related
Compliance and GovernanceRisk, gaps, policy, and evidenceNetwork and Physical SecuritySegmentation, firewalls, security systemsDoradus VantageOperational intelligence with a memory