Start with what matters.
These are useful areas to discuss when defining your assessment. The checks we agree on will depend on your systems, access and goals.
Confidential files
Review agreed client portals and file workflows for weaknesses in permissions, sharing and information exposure.
Team access
Examine whether staff roles and account settings provide appropriate access to the information each person needs.
Your digital front door
Assess website components, enquiry forms and exposed services that connect your firm with new clients.
The right assessment for your systems.
You don’t need to know which test to ask for. These services provide a starting point for a conversation about your environment.
Web application and API testing
Examine client portal logins, user permissions and access to shared records.
Security configuration reviews
Identify unnecessary access and hardening opportunities in agreed system settings.
Website security testing
Understand weaknesses in your firm's public website and its supporting components.
A clear scope comes first.
Start with the tools used to receive, store and share client information. Identify your IT contact, any outsourced providers and which systems your firm can authorise for testing. We agree access, timing and boundaries together.
Findings your team can act on.
- A report explaining identified weaknesses, their potential impact and practical remediation guidance.
- A discussion of the findings to help you plan priorities with your developers, IT team or providers.
- A conversation about follow-up testing where needed, with any retesting scoped separately.