Call Book a call
Access basics · practical hardening

Put the second lock where it matters.

Most small-business incidents start with one account that was too powerful, too shared, or too easy to sign into. We review the accounts that matter, close the obvious access gaps, and leave you with proof your insurer or client can understand.

  • MFA coverage reviewed across owners, admins, email, finance, and shared tools
  • Admin and shared-account risks translated into a simple fix list
  • Offboarding and break-glass rules written so the office can follow them

Fixed prices, published. A person replies the same business day.

Prefer not to email? Use the contact form or call (647) 835-6368.

The access review covers
  • Microsoft 365 or Google Workspace sign-in protections
  • Admin accounts, shared accounts, and external users
  • Password-manager readiness and recovery ownership
  • Offboarding, emergency access, and owner accountability
Review access and MFA

No obligation - if we’re not useful, we’ll say so and point you to the free resources.

Insured · authorized in writing · nothing simulated or changed without your sign-off Fixed prices, published - with what’s not included in writing Toronto & GTA · on-site · we work with your IT company
How it works

No mystery, no runaround.

  1. 1
    Inventory

    We list the accounts that can read mail, move money, change settings, or access client data. You drive the screen; we change nothing without approval.

  2. 2
    Decide

    We mark what needs MFA, what should stop being shared, which admins need trimming, and who owns recovery access.

  3. 3
    Document

    You leave with a short access-control record, offboarding checklist, and the insurer-questionnaire answers that are true today.

What’s included

What gets checked

Review access and MFA
What this does not include
  • Enterprise identity architecture, SSO migrations, or complex conditional-access programs
  • Holding your passwords or recovery keys
  • Changes your IT provider should own - we write the requirement and coordinate the handoff
MFA coverage for owners, admins, finance, email, cloud storage, and remote access
Admin account separation and break-glass account design
Shared mailbox and shared-password risk review
External users and stale accounts that should be removed
Offboarding checklist for employees and contractors
Plain-English evidence notes for insurer and client questionnaires
The price, in the open
From $600 +HST · $600 up to 10 seats · $900 for 11–25 · often included in the Security Tune-Up

For most offices this is the fastest path from vague worry to a concrete security improvement. If the changes are larger, the Tune-Up becomes the work order.

Review access and MFA See all pricing
Straight answers

Questions owners actually ask

Do you need our passwords?

No. Your team signs in and drives. We review settings beside you, write the plan, and only make changes when authorized in writing.

Is this the same as zero-trust?

No. For a small or mid-sized office, the useful work is much plainer: MFA where it matters, fewer admins, no orphaned accounts, and a real offboarding habit.

Can our IT provider implement the fixes?

Yes. That is often the best answer. We give them the clear requirements and help the owner understand what was done.

More on the full FAQ page - including “why should we trust you with our office?”, answered honestly.

Most attacks need an account.

Make the important accounts harder to steal, harder to misuse, and easier to explain.

Review access and MFA (647) 835-6368

Not ready to talk? Take the free self-check - ten minutes, no email required.