{"title":"Industries","description":"\u003cp\u003eHardening bundles built around how a particular kind of organization works: a medical practice, a law firm, a church, a school, a plant floor. Each bundle runs a set of automated scans on your own systems and delivers one plain-English report with what to fix first.\u003c\/p\u003e","products":[{"product_id":"quickscan-full-service-business-security-scan","title":"General Business Hardening Bundle – 19 Scans, One Complete Report","description":"\u003cp\u003e\u003cstrong\u003eNineteen scans, one run, one report — the closest thing to a professional assessment that runs itself.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe General Business Hardening Bundle covers every surface a small business has: the computers and the accounts on them, the office network and its devices, the domain and everything it exposes to the internet, the cloud storage nobody has looked at since it was set up, and the identity exposure of the people who work there.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eEndpoint \u0026amp; accounts:\u003c\/strong\u003e Windows Security Health Check ($29), Ransomware Readiness Check ($39), Account \u0026amp; Access Review ($39), Credential Hygiene Check ($29), Out-of-Date Software Scan ($19), Startup \u0026amp; Persistence Check ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eNetwork:\u003c\/strong\u003e Wi-Fi \u0026amp; Home Network Check ($29), Smart Device Exposure Scan ($39), Router \u0026amp; Wi-Fi Settings Checklist ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAccess \u0026amp; governance:\u003c\/strong\u003e Insider Risk Self-Assessment ($39), Active Directory Health Check ($99)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInternet-facing:\u003c\/strong\u003e Internet Exposure Scan ($69), Website \u0026amp; Storefront Checkup ($69), Certificate \u0026amp; Encryption Check ($19), Email Spoofing \u0026amp; BEC Check ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCloud \u0026amp; identity:\u003c\/strong\u003e Cloud Storage Exposure Check ($49), Breach \u0026amp; Identity Exposure Check ($39), Digital Footprint Report ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOptional:\u003c\/strong\u003e Code \u0026amp; Secrets Scanner ($59) — runs only if you point it at a code repository you own\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $821. This scan: $499.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhat it replaces\u003c\/h3\u003e\u003cp\u003eAn IT provider charges $1,000–$2,000 for a basic automated vulnerability scan and $2,000–$4,000 for a standard assessment. Automated penetration-testing platforms start at $2,999 per test. This is a quarter to a half of the cheapest of those, with an attack-path narrative and a 90-day programme that none of them include at that price.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA score for every surface, plus a combined business risk picture.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across every scan — the report's most valuable section, showing how findings in different scans assemble into a complete intrusion path.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding confirmed by several scans is presented once and marked confirmed.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eAn executive summary written for an owner, a board, a client or an insurer.\u003c\/li\u003e\n\u003cli\u003eA 90-day security programme ordered by impact and effort.\u003c\/li\u003e\n\u003cli\u003eA full appendix with the detail from every scan.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses facing an insurance renewal, a client security questionnaire, or simply the realisation that nobody has ever looked. Also the right starting point before commissioning hands-on work — a report that surfaces a complete attack path is the best possible brief for the engineers who fix it.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain, public address and storage names — you must own them or be authorised to test them\u003c\/li\u003e\n\u003cli\u003eAbout an hour\u003c\/li\u003e\n\u003cli\u003eThe Active Directory check only produces results on a domain-joined machine; on a standalone PC it is reported as not applicable rather than as a pass\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWant to keep it that way?\u003c\/h3\u003e\u003cp\u003eThe \u003cstrong\u003eQuarterly Business Checkup\u003c\/strong\u003e re-checks your business every 90 days.\u003c\/p\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here logs in, submits an attack payload, exploits a weakness or changes a setting on your systems. It is not a penetration test, a certification, an audit or an attestation — if the report surfaces a complete critical attack path, it says so plainly and points you to ThreatVector's hands-on engagement.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913671340344,"sku":"FULL-SMB-41","price":499.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-FULL-SMB-41_a104568e-5237-4f77-8137-0cbbd86c8994.png?v=1792162413"},{"product_id":"faith-community-hardening-bundle-1","title":"Faith Community Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe congregation's office computer, website and giving.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns eighteen checks on this computer, the network it is on, the smart devices on it and the domains you declare, asks your congregation's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eThe scams aimed at a congregation wear the clergy's name: a gift-card request to a volunteer, a changed account for a contractor, a hijacked livestream. This bundle gathers what one office can show: its computers and Wi-Fi, the smart devices on the network, your giving page, website and domain, the clergy's public footprint, the doors donor records could leave through, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with CISA's Performance Goals and PCI DSS by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA church, synagogue, mosque, temple, parish or the small office of a diocese or regional body, with its own computers and domain. A denomination's headquarters or a diocese with many parishes is measured across every office and is the human-delivered engagement's customer; this bundle is one congregation's first look.\u003c\/p\u003e\n\u003cp\u003eA denomination's headquarters or a diocese is measured across every parish office, every shared system and every giving platform it runs for its congregations. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the office computer it ran on and is a useful first look for the administrator who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (18 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eDigital Footprint Report (FOOTPRINT-12)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eSmart Device Exposure Scan (IOT-04)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: one question you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$299 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Faith Community Hardening (IND-FAITH-Q-89): $399 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138732712248,"sku":"IND-FAITH-89","price":299.0,"currency_code":"USD","in_stock":false}]},{"product_id":"healthcare-practice-hardening-bundle-1","title":"Healthcare Practice Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe practice's computers and domain, mapped to HIPAA.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-four checks on this computer, the network it is on and the domains you declare, asks your practice's questions once, and maps everything to the HIPAA Security Rule in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA practice is measured against the Security Rule's safeguards, and the first thing an investigator or compliance reviewer asks for is evidence. This bundle gathers the evidence one workstation can give: its settings, the devices sharing its network, the patient data at rest and the doors it could leave through, your domain and e-mail, and your own answers to the questions no scan can see.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to the HIPAA Security Rule — with the HHS Health Industry Cybersecurity Practices. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA practice, clinic, dental or therapy office, pharmacy or home-health agency with its own computers and its own domain; a hospital department only for the workstations it owns. A hospital or health system is measured organisation-wide and is the human-delivered engagement's customer; this bundle is its first look at one workstation.\u003c\/p\u003e\n\u003cp\u003eA hospital or health system is measured across every department, every connected device and every business associate, with a risk analysis that covers the enterprise. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the workstation it ran on and is a useful first look for the IT lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (24 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eMedical \u0026amp; Operational Device Scan (DEVICES-77)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eOrganizational Breach \u0026amp; Exposure History (ORGHIST-75)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security or medical record number shapes)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$549 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Healthcare Practice Hardening (IND-HEALTH-Q-80): $699 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138733957432,"sku":"IND-HEALTH-80","price":549.0,"currency_code":"USD","in_stock":false}]},{"product_id":"financial-services-hardening-bundle-1","title":"Financial Services Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe office's computers and data, mapped to FTC Safeguards.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-five checks on this computer, the network it is on and the domains you declare, asks your firm's questions once, and maps everything to the FTC Safeguards Rule in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA mortgage broker, insurance agency, tax firm or adviser is a financial institution under the Safeguards Rule, and an FTC investigator, your examiner or your insurer's reviewer asks first for evidence of the written program. This bundle gathers what one workstation can show: its settings, the customer information at rest and the doors it could leave through, your domain and look-alike domains, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to the FTC Safeguards Rule — with NIST CSF 2.0 and PCI DSS by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eThe non-bank office: a mortgage broker or lender, insurance agency, tax or accounting firm, adviser or collection agency with its own computers and domain. A bank or credit union is examined organisation-wide by its federal regulator and is the human-delivered engagement's customer; this bundle is its first look at one workstation.\u003c\/p\u003e\n\u003cp\u003eA bank or credit union is examined by its regulator across every branch, system and vendor, against NIST CSF 2.0, the CRI Profile and the regulator's own handbooks. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the workstation it ran on and is a useful first look for the IT lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (25 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eOrganizational Breach \u0026amp; Exposure History (ORGHIST-75)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security, card or account number shapes)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$549 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Financial Services Hardening (IND-FINANCE-Q-81): $699 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138736939320,"sku":"IND-FINANCE-81","price":549.0,"currency_code":"USD","in_stock":false}]},{"product_id":"real-estate-office-hardening-bundle-1","title":"Real Estate Office Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe brokerage's computers, mapped to NIST CSF 2.0.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-two checks on this computer, the network it is on and the domains you declare, asks your brokerage's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA closing is lost to one forged e-mail with new wiring instructions, and your clients and your insurer ask how the brokerage verifies a wire, stands against a look-alike domain and handles agents' devices. This bundle gathers what one office can show: its computers, the doors transaction records could leave through, your domain and the domains one letter from it, your principals' public footprint, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with the FTC Safeguards Rule by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA brokerage, an agent's office, a property-management company or a title and escrow office with its own computers and domain. A national brokerage or franchise network is measured across its offices and is the human-delivered engagement's customer; this bundle is one office's first look.\u003c\/p\u003e\n\u003cp\u003eA national brokerage, franchise network or title company is measured across every office, platform and affiliated agent. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the office computer it ran on and is a useful first look for the broker who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (22 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eDigital Footprint Report (FOOTPRINT-12)\u003c\/li\u003e\n\u003cli\u003eTravel Connection \u0026amp; Device Safety Test (TRAVEL-72)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: one question you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$449 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Real Estate Office Hardening (IND-REALTY-Q-82): $549 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138737430840,"sku":"IND-REALTY-82","price":449.0,"currency_code":"USD","in_stock":false}]},{"product_id":"defense-contractor-readiness-bundle-1","title":"Defense Contractor Readiness Bundle","description":"\u003cp\u003e\u003cem\u003eOne workstation's first look at NIST SP 800-171 Rev 2.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-five checks on this computer, the network it is on and the domains you declare, asks your contractor's questions once, and maps everything to NIST SP 800-171 Rev 2 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA subcontractor with controlled information is held to 110 requirements, and the self-assessment is yours to make and affirm. This bundle shows what one workstation looks like against them: its logging and hardening, the controlled data at rest and the doors it could leave through, your domain and e-mail, your equipment and digital assets, and your own answers to the questions no scan can see.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST SP 800-171 Rev 2 — with FAR 52.204-21 for Level 1. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eThe small subcontractor to the Department of War (formerly the Department of Defense) that handles Federal Contract Information or Controlled Unclassified Information and is preparing a CMMC Level 1 or Level 2 self-assessment. A prime contractor or a large program is measured across every enclave and flow-down and is the human-delivered engagement's customer; this bundle is one workstation's first look.\u003c\/p\u003e\n\u003cp\u003eA prime contractor or a large program is measured across every enclave, every flow-down and every system that stores, processes or transmits controlled information, with a System Security Plan that covers the whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the workstation it ran on and is a useful first look for the person who will write or update that plan.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (25 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eOrganizational Breach \u0026amp; Exposure History (ORGHIST-75)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eHardware, Firmware \u0026amp; Removable-Media Check (ASSET-73)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eOffered separately, never run by this package: Linux Server Hardening Check (SERVER-25): a Linux product the Windows package engine cannot run on this computer; the report offers it.\u003c\/p\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents carry CUI markings or regulated-data patterns? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$649 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Defense Contractor Readiness (IND-DEFENSE-Q-83): $799 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138738577720,"sku":"IND-DEFENSE-83","price":649.0,"currency_code":"USD","in_stock":false}]},{"product_id":"supply-chain-hardening-bundle-1","title":"Supply Chain Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe 3PL's or broker's computers, mapped to NIST CSF 2.0.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-three checks on this computer, the network it is on, the warehouse devices it can hear and the domains you declare, asks your operation's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA load is paid to a carrier who never existed, a warehouse system is locked the week before peak, and your shippers' questionnaires ask what you have in place. This bundle gathers what one site can show: its computers, the devices sharing its network, your domain and the look-alike domains used for carrier impersonation, your portal endpoint, your asset register, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with CISA's Cybersecurity Performance Goals 2.0. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA freight broker, third-party logistics provider, warehouse, small carrier or customs broker with its own computers and domain. A large 3PL, carrier network or port operator is measured across every site and system and is the human-delivered engagement's customer; this bundle is one site's first look.\u003c\/p\u003e\n\u003cp\u003eA large 3PL, carrier network or port operator is measured across every site, every integrated system and every partner connection. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the computer and the network it ran on and is a useful first look for the operations lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (23 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eMedical \u0026amp; Operational Device Scan (DEVICES-77)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eHardware, Firmware \u0026amp; Removable-Media Check (ASSET-73)\u003c\/li\u003e\n\u003cli\u003eAPI \u0026amp; Web-Endpoint Security Scan (API-60) — runs only when you give the address of a web API you run, if any (optional)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$499 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Supply Chain Hardening (IND-LOGISTICS-Q-84): $649 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138738741560,"sku":"IND-LOGISTICS-84","price":499.0,"currency_code":"USD","in_stock":false}]},{"product_id":"manufacturing-plant-hardening-bundle-1","title":"Manufacturing Plant Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe plant's office PCs and the devices on their network.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-three checks on this office computer, the network it is on, the production devices it can hear and the domains you declare, asks your plant's questions once, and maps everything to the NIST Cybersecurity Framework Manufacturing Profile in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eRansomware stops the line, and a customer's supplier questionnaire or your insurer asks whether the office and the floor share one network, who reaches the machines from outside, and what still runs on old Windows. This bundle gathers what one plant can show: its office computers, the devices sharing its network, the doors designs could leave through, your domain, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to the NIST CSF Manufacturing Profile — with IEC 62443 by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA small to mid-size plant or machine shop with its own office computers and a production floor; a defence supplier is cross-sold the Defense Contractor Readiness Bundle. A multi-plant manufacturer is measured across every plant and production network and is the human-delivered engagement's customer; this bundle is one plant's first look.\u003c\/p\u003e\n\u003cp\u003eA multi-plant manufacturer is measured across every plant, every production network and every automation vendor's access, with zones and conduits drawn for the whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the office computer and the network it ran on and is a useful first look for the plant manager who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (23 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eMedical \u0026amp; Operational Device Scan (DEVICES-77)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eHardware, Firmware \u0026amp; Removable-Media Check (ASSET-73)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eOffered separately, never run by this package: Linux Server Hardening Check (SERVER-25): a Linux product the Windows package engine cannot run on this computer; the report offers it.\u003c\/p\u003e\n\u003ch3\u003eBefore it runs: one question you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$549 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Manufacturing Plant Hardening (IND-MFG-Q-85): $699 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138739560760,"sku":"IND-MFG-85","price":549.0,"currency_code":"USD","in_stock":false}]},{"product_id":"law-firm-hardening-bundle-1","title":"Law Firm Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe firm's computers and client data, mapped to CSF 2.0.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-five checks on this computer, the network it is on and the domains you declare, asks your firm's questions once, and maps everything to NIST CSF 2.0 with ISO\/IEC 27001 by reference, in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA firm's duty of confidentiality is tested by a wire-fraud e-mail, a stolen mailbox or a client file that left with a departure, and clients' outside-counsel guidelines ask for evidence of the controls. This bundle gathers what one office can show: its computers, the client data at rest and the doors it could leave through, your domain, e-mail and look-alike domains, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with ISO\/IEC 27001 by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA solo practitioner, a small or mid-size firm, or an in-house legal department with its own computers and domain. A large firm or the legal department of a large company is measured across every office and matter system and is the human-delivered engagement's customer; this bundle is one office's first look.\u003c\/p\u003e\n\u003cp\u003eA large firm or the legal department of a large company is measured across every office, matter system and client guideline, often to ISO\/IEC 27001 as a whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the computer it ran on and is a useful first look for the partner or IT lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (25 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eDigital Footprint Report (FOOTPRINT-12)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eTravel Connection \u0026amp; Device Safety Test (TRAVEL-72)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security, card or account number shapes)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$549 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Law Firm Hardening (IND-LAW-Q-86): $699 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138739691832,"sku":"IND-LAW-86","price":549.0,"currency_code":"USD","in_stock":false}]},{"product_id":"public-office-hardening-bundle-1","title":"Public Office Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe town's or court's computers, mapped to NIST CSF 2.0.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-seven checks on this computer, the network it is on, the devices it can hear and the domains you declare, asks your office's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA town, county, court or clerk's office is measured by its state, its insurer and the MS-ISAC review, and one forged payroll e-mail or a locked records system ends a resident's trust. This bundle gathers what one office can show: its workstations, the cameras and badge readers on its network, the records at rest and the doors they could leave through, your domain and website, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with CISA's Performance Goals and the CJIS Security Policy by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA town, county, district, court, clerk's office or state field office with its own computers and domain. A state agency or a federal office is measured organisation-wide under its own framework and is the human-delivered engagement's customer; this bundle is one office's first look and its framework reference is still correct for the workstation it ran on.\u003c\/p\u003e\n\u003cp\u003eA state agency or a federal office is measured organisation-wide, under its state framework or under FISMA and NIST SP 800-53, with an authorisation that covers every system. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the workstation it ran on and is a useful first look for the IT lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (27 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eMedical \u0026amp; Operational Device Scan (DEVICES-77)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eOrganizational Breach \u0026amp; Exposure History (ORGHIST-75)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eHardware, Firmware \u0026amp; Removable-Media Check (ASSET-73)\u003c\/li\u003e\n\u003cli\u003eActive Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security or account number shapes)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$549 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Public Office Hardening (IND-GOV-Q-87): $699 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138741657912,"sku":"IND-GOV-87","price":549.0,"currency_code":"USD","in_stock":false}]},{"product_id":"school-campus-hardening-bundle-1","title":"School \u0026 Campus Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe school's office computers, mapped to NIST CSF 2.0.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-three checks on this office computer, the network it is on, the classroom devices it can hear and the domains you declare, asks your school's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA locked student information system closes the school for days, and families, your state education department and your insurer ask how student records are kept, which vendors receive them and who can reach them. This bundle gathers what one school can show: its office computers, the classroom devices and cameras sharing its network, the student records at rest, your domain and e-mail, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with FERPA, CIPA and COPPA as expectations. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA K-12 public, charter or private school, or a small college, with its own computers and domain. A large district or a university is measured across every campus and system and is the human-delivered engagement's customer; this bundle is one school's first look.\u003c\/p\u003e\n\u003cp\u003eA large district or a university is measured across every campus, every student system and every vendor that receives student records, with a program that covers the whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the office computer it ran on and is a useful first look for the technology lead who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (23 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eMedical \u0026amp; Operational Device Scan (DEVICES-77)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003cli\u003eWorkstation Policy \u0026amp; Logging Check (POLICY-79)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: one question you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security number shapes beside a name)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$499 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly School \u0026amp; Campus Hardening (IND-EDU-Q-88): $649 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138742935864,"sku":"IND-EDU-88","price":499.0,"currency_code":"USD","in_stock":false}]},{"product_id":"non-profit-charity-hardening-bundle-1","title":"Non-Profit \u0026 Charity Hardening Bundle","description":"\u003cp\u003e\u003cem\u003eThe charity's computers and donor data, mapped to CSF 2.0.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3\u003eWhat it is\u003c\/h3\u003e\n\u003cp\u003eRuns twenty-four checks on this computer, the network it is on and the domains you declare, asks your charity's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.\u003c\/p\u003e\n\u003cp\u003eA charity is measured by its donors, its funders and its state, and one forged invoice or a donor list that left with a volunteer costs the trust that gifts depend on. This bundle gathers what one office can show: its computers, the donor and beneficiary data at rest and the doors it could leave through, your domain and look-alike domains, and your own answers.\u003c\/p\u003e\n\u003ch3\u003eThe framework\u003c\/h3\u003e\n\u003cp\u003eMapped to NIST CSF 2.0 — with CISA's Performance Goals and PCI DSS by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.\u003c\/p\u003e\n\u003ch3\u003eWho it is for\u003c\/h3\u003e\n\u003cp\u003eA charity or non-profit with a small staff, volunteers, a donor CRM and grant data, with its own computers and domain. A national charity or a federation of affiliates is measured across every chapter and system and is the human-delivered engagement's customer; this bundle is one organisation's first look.\u003c\/p\u003e\n\u003cp\u003eA national charity or a federation of affiliates is measured across every chapter, every shared system and every funder's requirement, with a program that covers the whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the computer it ran on and is a useful first look for the executive director or IT volunteer who ran it.\u003c\/p\u003e\n\u003ch3\u003eWhat runs (24 checks)\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWindows Security Health Check (ENDPOINT-01)\u003c\/li\u003e\n\u003cli\u003eRansomware Readiness Check (RANSOM-READY-03)\u003c\/li\u003e\n\u003cli\u003eAccount \u0026amp; Access Review (INSIDER-ACCESS-05)\u003c\/li\u003e\n\u003cli\u003eCredential Hygiene Check (PW-HYGIENE-11)\u003c\/li\u003e\n\u003cli\u003eOut-of-Date Software Scan (EOL-16)\u003c\/li\u003e\n\u003cli\u003eStartup \u0026amp; Persistence Check (PERSIST-24)\u003c\/li\u003e\n\u003cli\u003eWi-Fi \u0026amp; Home Network Check (WIFI-LAN-02)\u003c\/li\u003e\n\u003cli\u003eRouter \u0026amp; Wi-Fi Settings Checklist (ROUTER-22)\u003c\/li\u003e\n\u003cli\u003eEmail Spoofing \u0026amp; BEC Check (BEC-08)\u003c\/li\u003e\n\u003cli\u003eBreach \u0026amp; Identity Exposure Check (BREACH-10)\u003c\/li\u003e\n\u003cli\u003eInsider Risk Self-Assessment (INSIDER-21)\u003c\/li\u003e\n\u003cli\u003eIndustry Readiness Questionnaire (READINESS-91)\u003c\/li\u003e\n\u003cli\u003eInternet Exposure Scan (EXPOSURE-06)\u003c\/li\u003e\n\u003cli\u003eWebsite \u0026amp; Storefront Checkup (STOREFRONT-07)\u003c\/li\u003e\n\u003cli\u003eCertificate \u0026amp; Encryption Check (TLS-09)\u003c\/li\u003e\n\u003cli\u003eDomain \u0026amp; DNS Security Check (DNS-63)\u003c\/li\u003e\n\u003cli\u003eBusiness Impersonation \u0026amp; Typosquat Sweep (IMPERSON-19)\u003c\/li\u003e\n\u003cli\u003eDigital Footprint Report (FOOTPRINT-12)\u003c\/li\u003e\n\u003cli\u003eCloud Storage Exposure Check (BUCKET-28)\u003c\/li\u003e\n\u003cli\u003eOrganizational Breach \u0026amp; Exposure History (ORGHIST-75)\u003c\/li\u003e\n\u003cli\u003eAI Usage \u0026amp; Shadow-AI Exposure Review (AIUSE-70)\u003c\/li\u003e\n\u003cli\u003eDigital Asset Register \u0026amp; Ownership Check (REGISTER-74)\u003c\/li\u003e\n\u003cli\u003eRemovable Media \u0026amp; Cloud Sync Check (DATAEXIT-76)\u003c\/li\u003e\n\u003cli\u003eSensitive Data at Rest Check (SENSDATA-78)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eBefore it runs: two questions you can say no to\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMay the Removable Media \u0026amp; Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003cli\u003eMay the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security, card or account number shapes)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003ePrice\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003e$399 one-time.\u003c\/strong\u003e Run it every 90 days as the Quarterly Non-Profit \u0026amp; Charity Hardening (IND-NONPROFIT-Q-90): $499 a year for four runs with a trend line on every check.\u003c\/p\u003e\n\u003ch3\u003eWhat it never does\u003c\/h3\u003e\n\u003cp\u003eIt never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":53138744508728,"sku":"IND-NONPROFIT-90","price":399.0,"currency_code":"USD","in_stock":false}]}],"url":"https:\/\/cybermafia.store\/collections\/industries.oembed","provider":"ThreatVector","version":"1.0","type":"link"}