What we look for during the audit

Across every service we audit, our analysts look for:

• Traces of unauthorised access and signs of prior compromise.
• Misconfigurations, weak permissions and exposed services.
• Outdated or unpatched software across the stack.
• Access-control, firewall and hardening gaps.
• Problematic security issues that need addressing.

The goal is both forensic — has anything already gone wrong — and preventative — where are the weaknesses an attacker could exploit next.