Understanding the problem
Outdated software, forgotten services and default settings open the door to attacks. A vulnerability assessment surveys those weak points broadly and shows what to fix first.
When this service helps
- You're not sure which company systems are exposed online.
- You need a periodic security check-up.
- You want to prioritize security spending based on real risks.
How it works
- 01First contact. Describe your situation via Telegram or the form, without sending sensitive data.
- 02Initial review. We assess feasibility and explain what can be established.
- 03Proposal. You receive scope, timeline and price in writing, with e-acceptance.
- 04Execution. Work starts after a 50% payment, made once the proposal is accepted.
- 05Report. Once the work is done, the remaining 50% releases the full report.
How we analyze
- Inventory of authorized assets: domains, servers and services.
- Scans with recognized tools plus manual validation.
- Risk ranking by impact and ease of exploitation.
- Comparison with recommended versions and settings.
What you receive
- A prioritized list of vulnerabilities.
- A staged remediation plan.
- An executive summary for management.
Want your case assessed?
Describe the situation on Telegram. The initial review shows what can be established before any proposal.
Talk to a specialist (Telegram @investigacoesonline)Technical and legal limits
- We only assess assets authorized in writing.
- It's broader and shallower than full security testing.
Frequently asked questions
How is it different from security testing?
An assessment gives a broad overview; testing goes deeper and tries to exploit flaws in a controlled way.
How often should we do it?
Periodically, and always after significant system changes.
Related guide: How to find security flaws in my website?