We only store what is needed for the website to work. With your consent we also use Google Analytics to see how our website is used and to improve it. Data may be transferred to the USA. You can change or withdraw your choice at any time via “Privacy settings” at the bottom of every page. With your consent to the “Marketing” category, we also use Meta Pixel and Google Ads to measure the success of our ads.
Phishing emails, hijacked accounts, lost data: many attacks on small and medium-sized businesses exploit simple gaps. We close them step by step, explained clearly and tailored to your business.
Access, email accounts, multi-factor sign-in, permissions, backups and basic security processes. We start where the risk is highest.
A separate, secure password for each service and a password manager for the team.
Secure mailboxes, review forwarding rules and protect your domain with SPF, DKIM and DMARC.
A second factor for email, cloud and all important accounts.
Everyone only gets the rights they really need. Old access is removed.
Regular backups with a separate copy and tested recovery.
Clear procedures for new staff, leavers and emergencies, short and easy to follow.
The most common way in.
An email looks like it’s from a bank, a parcel service or Microsoft and asks you to log in.
Check the sender carefully; pressure and urgency are warning signs; don’t click links blindly.
Two-factor sign-in makes access much harder, even if a password has been stolen.
Attackers take over an account and quietly read along.
Someone signs in with a stolen password, reads along and sends emails in your name.
Unknown forwarding rules, sign-ins from other countries, customers asking about strange emails.
Two-factor sign-in and a separate password per service from the password manager.
One guessed password opens many doors.
Attackers automatically try common or short passwords, or use passwords from earlier data leaks.
The same password for several services, short passwords, passwords on sticky notes.
A separate, long password per service from the password manager and a second factor.
Too many people have access to too much.
Former staff, service providers or shared accounts still have access, often unnoticed.
Shared logins, admin rights for everyone, no list of who has access.
Personal accounts, rights only as needed and a regular review of access.
Check a few basic protective measures. Your answers stay in your browser; nothing is stored or sent.
The self-check doesn’t replace an assessment by experts. It shows where it’s best to start.
First the inventory, then a prioritised action plan. So you know what matters first.
We go through access, email accounts, permissions and backups together and assess the risks.
What’s included
All measures sorted by risk and effort, with a clear order of what to implement first.
What’s included
Technical security testing is only carried out by suitably qualified specialists.
Tell us briefly how you work and what’s on your mind. We’ll get back to you personally and tell you where it’s best to start.
These settings are only stored in your browser. Accessibility statement
Type at least two letters.