Know what you're taking on before the contract starts

The takeover

The last provider left you something

You've won a client on a fixed fee. The price assumed the estate is in the state the outgoing provider said it was. Often it isn't: backups that stopped succeeding months ago, a server past the end of its support, an administrator account no one at the client recognises, a disk that has been reporting its own failure.

Whatever you find in month two, you've already agreed to fix inside the fee. The audit gives you that list in the first week, while you can still do something with it: price it as an onboarding project, or put it to the client before the contract starts.

What you get

Every machine assessed, then the whole client in one report

The agent reads each machine and our analysis writes up what it finds, check by check. On a Windows machine that covers:

• Patching: missing operating system and third-party updates, versions past end of life, and how long since patching last completed.
• Defences: Microsoft Defender's real-time protection, signature age and tamper protection, the firewall profiles, and any other antivirus.
• Event logs: the system, application and security logs, read for the faults and sign-in patterns behind them.
• Software: what's installed, what's out of date or unwanted, and every executable checked against NIST's National Software Reference Library, so unknown ones stand out.
• Malicious and unsanctioned software: the machine's files scanned for both, with what a match means for that machine.
• Disks and storage: predicted failures, solid-state wear, bad sectors, and where free space is heading.
• Backups: whether the backup jobs on the machine ran and succeeded, and what a failure says.
• Exposure: which ports the machine listens on, and whether a service is reachable from further away than it should be.
• Services and sign-ins: services and scheduled jobs that failed or appeared, and who is signed in that shouldn't be.

Linux and macOS machines get the checks for their own systems. The first finding arrives about a minute after the agent is installed; on the Windows machines in our pilots, 19 to 20 checks had finished within 24 hours. The price covers two full passes on every machine, so you can run the second after the first fixes go in and show what changed.

The report

Each machine gets its own assessment. The client gets one PDF that opens on a cover: the machines to read first, each with its three weakest checks; the issues that repeat across several machines; the fleet's average health and how many machines score under 60. Every machine's assessment follows, worst first, with a bookmark each. Every page carries your logo, colour and contact line.

Findings also carry the controls they bear on in Cyber Essentials, the CIS controls and the other frameworks you choose. That mapping is a guide for the conversation with your client; it isn't a certification.

Before you pay

Try it on your own machines first

Sign up and install the agent on up to three of your own machines. There's no card to enter. You'll get the same assessments a client's machines will get, and the same report, with your logo once you've added it. You'll know what you're buying before you buy it.

Price

How it works

Four steps, and the first one is free

1. Start free

   Sign up and put the agent on up to three of your own machines. Read their assessments.

2. Buy the audit

   In the app, by card: £249 for up to 30 machines, £5 for each machine above.

3. Install at the client

   Add the client in Wegweiser and use its installer: one machine at a time, or a Windows package your software distribution can push.

4. Hand over the report

   Every machine's assessment and the client report, in your branding. Then remove the agent, or keep it on a plan.

Before you install

What MSPs ask first