Your data, protected.
Most security problems at a small business start with something simple: a fake email, a reused password, an outdated computer, or a phone with no lock. We review and set up your email, passwords, computers, phones, and the accounts that keep you visible, and explain all of it in plain words.
Internet: email, browser, and passwords
The door used most gets the most care.
Almost everything starts with email. We turn on two-step verification, move your passwords into a manager only you control, and bring your browser up to date. If your business has its own email domain, we set it up so no one can send email pretending to be you.
What we review with you
- Two-step verification or passkeys on the accounts that matter
- A password manager in your name, with no reused passwords
- Your email domain set up against impersonation
- An up-to-date browser with few extensions
This is for you if
You use the same password on several accounts, or you have already received an email that looked like your bank.
Desktops and laptops
Computers kept current, and a backup that actually works.
A stolen laptop should not become a data problem. We set automatic updates, disk encryption where the system allows it, a daily account without admin rights, and a backup we test with you.
What we review with you
- Automatic updates for the system and browser
- Encrypted disk, so a lost computer doesn't expose your information
- Built-in antivirus on, and no tools that switch protections off
- A 3-2-1 backup, tested by restoring a file
This is for you if
Your business lives on one or two computers and you're not sure when the last backup ran.
Phones
Your phone is your office. Keep it locked.
Business WhatsApp, email, banking, and social media all live on your phone. We set up the lock, theft protection, updates, and app permissions, and leave you a step-by-step guide for your model. On your team's personal phones, only what each person authorizes.
What we review with you
- Screen lock and theft protection
- System and apps up to date, with permissions reviewed
- A step-by-step guide for your phone model
- What to do in the first 30 minutes if it's lost
This is for you if
You serve customers over WhatsApp and your phone can reach everything.
The accounts that keep you visible
What you built on Google, in your name and locked down.
Your Google Business Profile, social accounts, and website are the face of your business. We check that they are in your name, with two-step verification and known admins, that your site uses a secure connection and stays current, and that your domain renews on its own.
What we review with you
- Google Business Profile in your name, with admins reviewed
- Social accounts with two-step verification and a business recovery email
- A website with a secure connection and current components
- A domain with auto-renewal and transfer lock
This is for you if
Your business depends on being found on Google or social media.
The most common risks are the simplest, and they can be closed.
The incidents that hit small businesses most are rarely sophisticated attacks. They are open doors that good settings and clear habits can close.
How we workFour steps, and you always know what we touch.
You authorize in writing
You sign off on which accounts, computers, and phones we review, and when. Anything not on the list stays untouched.
We review with you
Always with someone from your team present. We never ask for your passwords: you type them, or you give us limited access.
We set it up and explain
Every change in plain words. Before we touch a computer, you make a backup.
You get your report
What you had, what changed, what is left, and why. With guides for what you maintain and a one-page plan in case something happens.
On its own, included with your site, or before connecting your data.
What we never do. We don't promise that no one can attack you: no one can honestly promise that. This is not a certification. We never ask for or store your passwords. We don't monitor your team. We don't touch patient records or case files.
Four things that happen inside your browser.
Each one runs right here, with tools your browser already has. Nothing is sent and nothing is saved: close the page and it's all gone.
The look-alike address.
One of these four is the real address. The other three look almost the same. Which one is real? Tap one.
What happened: your eyes see letters; your browser sees numbers. A Cyrillic "о" and a Latin "o" look identical on screen, but the browser turns them into different addresses, like the ones under each box. These are only four examples: there are many more ways to imitate an address. That's why it pays to type your bank's address yourself or use a bookmark.
The 30-second code.
This is a real two-step verification code, calculated here with the same public formula authenticator apps use. Watch it expire.
- When you turn on two-step verification, the service and your phone keep the same secret. Here's a sample one, created just now in your browser:
- Every 30 seconds, both combine that secret with the time and get six digits. They don't need to talk to each other.
- If the digits match, you're in. If someone steals a code, it only works for a moment.
What happened: the code doesn't travel over the internet until you type it. That's why you should never give it to anyone who asks for it by phone or message: that's exactly what they're after.
What any website sees about you.
Without asking, without cookies and without a click, any page can read these details from your browser. Each star is one.
These are public details from your browser, not private data: they don't say your name, your email or what you do. This page reads them only to show them to you here. It doesn't save them, doesn't send them and doesn't use them for any kind of tracking.
What happened: each detail says little on its own, but together they can tell your device apart from many others. An up-to-date browser with few extensions leaves a more common print that's harder to follow.
When something goes wrong, what survives?
Check what you already have, pick a mishap and see what's still standing.
Office
Cloud
Away from the office
Your accounts
Your phone
What happened: a copy that lives plugged into the computer shares its fate, and a password alone is a single door. The public 3-2-1 rule sums it up for backups: three copies, in two kinds of place, one of them away or unplugged. Our work reviews these and many other security measures.
QuestionsWhat people ask before we start.
How do you handle AI, security and privacy?
With clear limits. AI helps with the work, people answer for it, and every tool gets only the access it needs. Your accounts and records stay protected. I'm happy to walk you through it on the call.
Do I need to know about technology?
No. We explain every step in plain words and leave you guides for what you maintain.
Will you ask for my passwords?
Never. You type them, or you invite us with limited access that we remove when we finish. Your password manager is yours alone.
Does this guarantee I won't be attacked?
No, and be wary of anyone who guarantees it. What we do is close the most common doors and leave you a clear plan in case something happens.
How long does it take?
For a small business, the review usually takes one to three weeks, depending on how many computers and phones there are.
What about my employees' phones?
We only review what each person authorizes in writing, and we never install anything that monitors anyone.
What if an account was already stolen?
Write to us. We will guide you through the first steps and who to contact. Handling a serious incident in depth is quoted separately.
Tell me what you need. We'll find the right fit.
Thirty minutes, free, nothing to sign. If a smaller step makes more sense than a full project, I'll say so.