{"title":"Automated Scanning \u0026 Reporting Services","description":"\u003cp\u003eAutomated security scans you run yourself. One download, one click, and a plain-English report written to CompTIA Security+ and PenTest+ practice standards — no subscription, no jargon, and no expertise required.\u003c\/p\u003e\u003cp\u003eIndividual checks from $19. Bundles that run every scan in a single pass and correlate the findings into one report.\u003c\/p\u003e","products":[{"product_id":"quickscan-windows-security-health-check","title":"Windows Security Health Check – Automated PC Security Scan","description":"\u003cp\u003e\u003cstrong\u003eFind out whether your Windows PC is actually protected — in about five minutes, without needing to understand any of it.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Windows Security Health Check is a one-click scan that inspects the security controls Windows already has built in, then tells you in plain English which ones are switched off, misconfigured, or quietly out of date. You run one file. We send back a report a normal person can act on.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eAntivirus and real-time protection status, including whether definitions are current\u003c\/li\u003e\n\u003cli\u003eWindows Firewall state across all three network profiles\u003c\/li\u003e\n\u003cli\u003ePending and overdue security updates\u003c\/li\u003e\n\u003cli\u003eDevice encryption \/ BitLocker status on your system drive\u003c\/li\u003e\n\u003cli\u003eSMBv1 — the obsolete file-sharing protocol behind WannaCry — and other legacy protocols\u003c\/li\u003e\n\u003cli\u003eHow many accounts on the machine hold full administrator rights\u003c\/li\u003e\n\u003cli\u003eUser Account Control and Secure Boot configuration\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, so you know what to fix first.\u003c\/li\u003e\n\u003cli\u003eAn executive summary in plain English you can hand to a business partner or an insurer.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions written for a normal computer user, not an engineer.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone who owns a Windows computer and has never had it looked at — home users, freelancers, and small businesses with no IT department. No technical skill required.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator (right-click the file, choose \"Run as administrator\")\u003c\/li\u003e\n\u003cli\u003eAn internet connection so the report can be sent for analysis\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It never exploits a weakness, never changes a setting on your machine, and leaves nothing running behind it. It is not a certification, an audit or an attestation. If the scan turns up something serious, the report says so plainly and points you to the hands-on ThreatVector service that deals with it.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913668915512,"sku":"ENDPOINT-01","price":29.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-ENDPOINT-01_41dd220b-43f1-4396-97a2-977e3485852f.png?v=1788709314"},{"product_id":"quickscan-wifi-home-network-check","title":"Wi-Fi \u0026 Home Network Check – Wireless and LAN Security Scan","description":"\u003cp\u003e\u003cstrong\u003eYour Wi-Fi is the front door to everything you own. This scan checks whether it is locked.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Wi-Fi \u0026amp; Home Network Check looks at the wireless networks your computer trusts and at everything currently sharing your network, then explains what it found without the jargon. Free apps can list your devices; this one tells you which of them is a problem and what to do about it.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eThe encryption standard on every saved Wi-Fi network — open, WEP, WPA, WPA2 or WPA3\u003c\/li\u003e\n\u003cli\u003eNetworks your computer will silently auto-connect to, including weak or open ones\u003c\/li\u003e\n\u003cli\u003eEvery device currently visible on your local network, with its manufacturer where identifiable\u003c\/li\u003e\n\u003cli\u003eDevices you may not recognise, so you can spot a neighbour, a guest, or something that shouldn't be there\u003c\/li\u003e\n\u003cli\u003eNetwork profile classification — whether Windows is treating your network as public or private, and whether that is right\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, so you know what to fix first.\u003c\/li\u003e\n\u003cli\u003eA device inventory you can keep and compare against next time.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions written for a normal computer user, not an engineer.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eHome users, people working from home, and small offices running on consumer networking gear. If you have never looked at who is on your Wi-Fi, start here.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, connected to the network you want checked\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It never exploits a weakness, never cracks a password, never changes a setting on your machine, and leaves nothing running behind it. It is not a certification, an audit or an attestation. If the scan turns up something serious, the report says so plainly and points you to the hands-on ThreatVector service that deals with it.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913668948280,"sku":"WIFI-LAN-02","price":29.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-WIFI-LAN-02_60f1fa81-0443-472e-a431-2357addfdb65.png?v=1788709314"},{"product_id":"quickscan-ransomware-readiness-check","title":"Ransomware Readiness Check – Backup and Recovery Verification","description":"\u003cp\u003e\u003cstrong\u003eAlmost everyone thinks they have backups. Far fewer could actually restore from them.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Ransomware Readiness Check answers the only question that matters on the worst day: if your files were encrypted tonight, could you get them back? It inspects the recovery capability already present on your machine and the specific configuration weaknesses ransomware crews rely on to get in.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhether a backup exists at all, when it last ran, and whether it is a copy ransomware could also encrypt\u003c\/li\u003e\n\u003cli\u003eVolume Shadow Copies and System Restore — the recovery points attackers delete first\u003c\/li\u003e\n\u003cli\u003eControlled Folder Access and ransomware protection features already built into Windows\u003c\/li\u003e\n\u003cli\u003eRemote Desktop exposure, the single most common ransomware entry point for small businesses\u003c\/li\u003e\n\u003cli\u003eOffice macro execution settings\u003c\/li\u003e\n\u003cli\u003eWhether your recovery copy is offline or offsite, and whether it has ever been tested\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA straight answer on recoverability, rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eEvidence you can put in front of a cyber-insurance application — most policies now require tested backups before they will pay.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions written for a normal computer user, not an engineer.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses, sole traders and anyone whose livelihood is on one computer. If losing your files would end your week, this is the check to run first.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes, plus a few questions about how you back up\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It does not encrypt, delete or move any of your files, never exploits a weakness, and leaves nothing running behind it. It is not a certification, an audit or an attestation. If the scan turns up something serious, the report says so plainly and points you to the hands-on ThreatVector service that deals with it.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913668981048,"sku":"RANSOM-READY-03","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-RANSOM-READY-03_72f715d8-653e-4fc4-a76e-49ecf086661a.png?v=1788709314"},{"product_id":"quickscan-smart-device-exposure-scan","title":"Smart Device Exposure Scan – IoT and Smart Home Security Check","description":"\u003cp\u003e\u003cstrong\u003eThe cheapest device on your network decides how secure the whole network is.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eSmart plugs, cameras, doorbells, TVs and hubs ship with services switched on that were never meant to face a network at all. The Smart Device Exposure Scan finds every one of them on your network and checks the specific ports that botnets like Mirai actually hunt for.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eEvery device on your network, discovered through the system ARP table and live UPnP\/SSDP announcements\u003c\/li\u003e\n\u003cli\u003eTelnet (port 23) — the number one entry point for smart-device botnets\u003c\/li\u003e\n\u003cli\u003eTR-069 remote management (port 7547), a documented router-botnet vector\u003c\/li\u003e\n\u003cli\u003eRTSP camera streams (port 554) that may be viewable without a password\u003c\/li\u003e\n\u003cli\u003eMQTT smart-home brokers (ports 1883 and 8883), routinely deployed with no authentication at all\u003c\/li\u003e\n\u003cli\u003eUnencrypted HTTP admin panels (port 80) on devices that should not have one\u003c\/li\u003e\n\u003cli\u003eDevices advertising UPnP InternetGatewayDevice control — the feature that lets malware silently open inbound ports on your router\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA per-device breakdown, rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003ePlain-English guidance on which devices to fix, which to isolate, and which to retire.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions written for a normal computer user, not an engineer.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmart-home owners, small offices with networked cameras or printers, and anyone who has added devices to their network faster than they have removed them.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, connected to the network you want checked\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 5–10 minutes depending on network size\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It checks whether a port answers; it never logs in, never guesses a password, never exploits a weakness, and leaves nothing running behind it. It is not a certification, an audit or an attestation. Only run it on a network you own or manage.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669013816,"sku":"IOT-04","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-IOT-04_c1b40e33-f4ea-4906-afd8-5c18cf479578.png?v=1788709314"},{"product_id":"quickscan-account-access-audit","title":"Account \u0026 Access Review – Windows Users and Admin Rights","description":"\u003cp\u003e\u003cstrong\u003eMost breaches do not start with clever hacking. They start with an account nobody remembered was still there.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Account \u0026amp; Access Review produces a straight inventory of who can log in to this computer, what they are allowed to do once they are in, and which of those permissions no longer has a reason to exist.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eEvery local account on the machine, including ones created by software installs\u003c\/li\u003e\n\u003cli\u003eWhich accounts hold administrator privileges, and which of those genuinely need them\u003c\/li\u003e\n\u003cli\u003eThe built-in Guest account and other default accounts that should be disabled\u003c\/li\u003e\n\u003cli\u003eAccounts that have not been used in a long time — the classic forgotten back door\u003c\/li\u003e\n\u003cli\u003ePassword policy settings: minimum length, complexity and expiry\u003c\/li\u003e\n\u003cli\u003eScreen lock and inactivity timeout, so an unattended machine is not an open machine\u003c\/li\u003e\n\u003cli\u003eMembership of remote-access groups such as Remote Desktop Users\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA clear account-by-account table, with findings rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eAnswers to the access-control questions that appear on nearly every cyber-insurance application.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions written for a normal computer user, not an engineer.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses with shared computers, anyone who has had staff or contractors come and go, and households where several people use the same machine.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads account settings; it never reads, cracks or changes anyone's password, never exploits a weakness, and leaves nothing running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669046584,"sku":"INSIDER-ACCESS-05","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-INSIDER-ACCESS-05_165d9067-bf97-44bd-94d7-2fabe513aca3.png?v=1788709314"},{"product_id":"quickscan-internet-exposure-scan","title":"Internet Exposure Scan – See What Attackers See From Outside","description":"\u003cp\u003e\u003cstrong\u003eEverything you expose to the internet is visible to someone scanning it. This is your look at the same view.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Internet Exposure Scan maps what your connection and your domain present to the outside world — which services answer, which of them should not, and which are advertising a version number an attacker can look up. Recurring scanners that do less than this start at $39 a month. This is one purchase and a report you can act on.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhich ports on your public address accept a connection, across a curated list of the ports that actually get attacked\u003c\/li\u003e\n\u003cli\u003eRemote-access services exposed to the open internet — Remote Desktop, SSH, Telnet and VNC\u003c\/li\u003e\n\u003cli\u003eDatabase and admin ports that should never face the internet\u003c\/li\u003e\n\u003cli\u003eTLS certificates on any service that offers one: validity, expiry, issuer and mismatch\u003c\/li\u003e\n\u003cli\u003eService banners that reveal software and version information\u003c\/li\u003e\n\u003cli\u003eDNS configuration that leaks more about your infrastructure than it needs to\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery exposed service rated Critical \/ High \/ Medium \/ Low, with the business risk explained.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to a partner, a client or an insurer.\u003c\/li\u003e\n\u003cli\u003eStep-by-step remediation guidance, ordered by what an attacker would reach for first.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses with a static IP, anyone hosting a service from their own connection, and owners who want to know what their perimeter looks like before someone else finds out.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 10 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to test the address or domain you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It checks whether a service answers; it never logs in, never guesses credentials, never exploits a weakness, and leaves nothing running behind it. It is not a penetration test, a certification, an audit or an attestation — if the report shows a serious exposure, it points you to ThreatVector's hands-on Internet Exposure Security Scan.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669079352,"sku":"EXPOSURE-06","price":69.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-EXPOSURE-06_f0809569-287f-45c1-867d-485220f79c47.png?v=1788709315"},{"product_id":"quickscan-website-storefront-checkup","title":"Website \u0026 Storefront Checkup – Online Store Security Scan","description":"\u003cp\u003e\u003cstrong\u003eYour website is the part of your business a stranger can inspect at any hour without asking. Know what it tells them.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Website \u0026amp; Storefront Checkup runs a safe, read-only examination of a site you own — a shop, a booking page, a brochure site — and reports the configuration weaknesses that get small businesses compromised: missing protections, aging software, and pages that were never meant to be public.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eHTTPS enforcement and whether insecure HTTP still serves your pages\u003c\/li\u003e\n\u003cli\u003eTLS certificate validity, expiry, issuer and hostname mismatch\u003c\/li\u003e\n\u003cli\u003eSecurity response headers — HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and referrer policy\u003c\/li\u003e\n\u003cli\u003eServer and platform version disclosure that tells an attacker exactly what to target\u003c\/li\u003e\n\u003cli\u003eCommon exposed paths: admin logins, backup files, configuration files and directory listings\u003c\/li\u003e\n\u003cli\u003eCookie security flags on anything that carries a session\u003c\/li\u003e\n\u003cli\u003eMixed content that quietly breaks the padlock your customers rely on\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the customer-facing impact spelled out.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can forward to whoever built the site.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions, including what to ask your web host or developer for.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eStore owners, service businesses and creators who run a site they did not build themselves and have no way to tell whether it is looked after.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 10 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own the site or be authorised to test it\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It requests pages the way any visitor would; it never logs in, never submits an attack payload, never exploits a weakness, and changes nothing on your site. It is not a penetration test, a certification, an audit or an attestation — if the report shows something serious, it points you to ThreatVector's hands-on Digital Storefront Security Checkup.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669210424,"sku":"STOREFRONT-07","price":69.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-STOREFRONT-07_84a314a4-4b0c-47e6-8c8c-92ec7c1da5df.png?v=1788709315"},{"product_id":"quickscan-email-spoofing-bec-check","title":"Email Spoofing \u0026 BEC Check – SPF, DKIM and DMARC Scan","description":"\u003cp\u003e\u003cstrong\u003eBusiness email compromise accounts for roughly a third of all cyber-insurance claims. It usually starts with a domain that anyone can forge.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Email Spoofing \u0026amp; BEC Check tests whether a criminal could send email that appears to come from your business — to your customers, your bookkeeper, or your bank. Dedicated DMARC platforms charge $20–$45 every month for this. This is a single purchase and a report that tells you exactly what record to publish.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eSPF — whether your domain declares who is allowed to send as you, and whether the policy is actually enforced\u003c\/li\u003e\n\u003cli\u003eDKIM — whether your outgoing mail is cryptographically signed\u003c\/li\u003e\n\u003cli\u003eDMARC — whether spoofed mail is rejected, quarantined, or silently allowed through\u003c\/li\u003e\n\u003cli\u003eMX and mail routing configuration\u003c\/li\u003e\n\u003cli\u003eWhether your mail server behaves as an open relay, tested safely without ever sending a message\u003c\/li\u003e\n\u003cli\u003eConfiguration gaps that make your domain an easy candidate for invoice fraud\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eThe exact DNS records to publish, written out so you can hand them to your registrar or IT provider.\u003c\/li\u003e\n\u003cli\u003eAn executive summary that explains the fraud risk in business terms.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAny business that sends email from its own domain and invoices customers. If someone impersonating you could get a client to pay the wrong account, run this.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe domain name you want checked\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It never sends a spoofed message, never delivers mail to anyone, never exploits a weakness, and changes nothing on your systems. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669243192,"sku":"BEC-08","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-BEC-08_1508a13c-3afc-46ed-a903-eaab625a78c5.png?v=1788709315"},{"product_id":"quickscan-certificate-encryption-audit","title":"Certificate \u0026 Encryption Check – SSL\/TLS Expiry and Configuration","description":"\u003cp\u003e\u003cstrong\u003eAn expired certificate takes your site down and tells every visitor you are not to be trusted. It is also completely preventable.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Certificate \u0026amp; Encryption Check inspects the certificate and encryption configuration on any domain you own and returns a plain-English verdict. Free expert tools will give you a technical grade; this gives you a report that says what is wrong, why it matters and what to do, in language you can forward to whoever manages your hosting.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eCertificate validity, expiry date and how many days you have left\u003c\/li\u003e\n\u003cli\u003eWho issued the certificate and whether the chain of trust is complete\u003c\/li\u003e\n\u003cli\u003eHostname mismatches — a certificate issued for the wrong name\u003c\/li\u003e\n\u003cli\u003eSelf-signed and untrusted certificates\u003c\/li\u003e\n\u003cli\u003eWhich TLS protocol versions the server still accepts, including obsolete ones\u003c\/li\u003e\n\u003cli\u003eCipher strength and weak encryption still enabled\u003c\/li\u003e\n\u003cli\u003eWhether the certificate covers the subdomains you actually use\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with renewal dates called out.\u003c\/li\u003e\n\u003cli\u003ePlain-English fix instructions you can pass to a host or developer.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone responsible for one or more domains who has been surprised by a certificate expiry before, and anyone who wants a cheap first look before committing to a larger scan.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe domain name you want checked\u003c\/li\u003e\n\u003cli\u003eAbout 3 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It performs a normal encrypted connection and reads what the server presents; it never logs in, never exploits a weakness, and changes nothing. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669275960,"sku":"TLS-09","price":19.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-TLS-09_8ba52dd9-6a09-4510-b1af-d117ec2cc05b.png?v=1788709315"},{"product_id":"quickscan-breach-identity-exposure-check","title":"Breach \u0026 Identity Exposure Check – Dark Web Self-Check","description":"\u003cp\u003e\u003cstrong\u003eYour password is probably in someone's database already. The question is which one, and what still uses it.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Breach \u0026amp; Identity Exposure Check searches the public breach and paste record for the addresses, passwords and domain you give it, then does the part free lookup sites never do: works out what the exposure actually means for you and what to change first.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhether your passwords appear in known breach corpora — checked using k-anonymity, so your password never leaves your machine\u003c\/li\u003e\n\u003cli\u003ePublic paste sites where dumped credentials and personal data get posted\u003c\/li\u003e\n\u003cli\u003eCertificate transparency records for your domain, which reveal subdomains and services you may have forgotten\u003c\/li\u003e\n\u003cli\u003eReuse patterns that turn one old breach into a live risk across your other accounts\u003c\/li\u003e\n\u003cli\u003eAn optional deeper breach-database lookup if you supply your own API key — and the report states plainly when that step was skipped rather than pretending it ran\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery exposure rated Critical \/ High \/ Medium \/ Low, with an explanation of what a criminal could do with it.\u003c\/li\u003e\n\u003cli\u003eA visual exposure map showing where your information turned up.\u003c\/li\u003e\n\u003cli\u003eA prioritised list of which accounts to change, in what order, and which to close entirely.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone who has used the same password twice, anyone whose email has been around for a decade, and business owners who need to know whether staff credentials are circulating.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe email addresses and domain you want checked — they must be yours\u003c\/li\u003e\n\u003cli\u003eAbout 5–10 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It searches public records; it does not buy data, does not access criminal marketplaces on your behalf, never exploits a weakness, and changes nothing. It is not a certification, an audit or an attestation. For a full investigation, the report points you to ThreatVector's hands-on Dark Web Exposure Scan.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669308728,"sku":"BREACH-10","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-BREACH-10_fbc30194-9051-49e4-82e3-a57b1157bd41.png?v=1788709315"},{"product_id":"quickscan-credential-hygiene-audit","title":"Credential Hygiene Check – Saved Logins and Password Age","description":"\u003cp\u003e\u003cstrong\u003eEvery saved login on your computer is a key someone else can pick up if they ever get in.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Credential Hygiene Check reviews how credentials are stored and aged on your Windows machine, and flags the specific kind of saved login — a stored remote-desktop connection to another computer — that turns one compromised PC into a compromised network.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eThe age of every local account password, and which have gone far past a sensible replacement point\u003c\/li\u003e\n\u003cli\u003eEntries stored in Windows Credential Manager, listed by name and type\u003c\/li\u003e\n\u003cli\u003eSaved remote-desktop credentials, flagged specifically as a lateral-movement risk\u003c\/li\u003e\n\u003cli\u003eWhether Windows Hello (PIN, fingerprint or face) is enrolled, and for which accounts\u003c\/li\u003e\n\u003cli\u003eWhether the machine relies on a single reusable password as its only barrier\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eRead this before you buy\u003c\/h3\u003e\u003cp\u003eThis product does \u003cstrong\u003enot\u003c\/strong\u003e read, decrypt or export passwords saved in your web browser. Chrome and other modern browsers deliberately prevent any other program from doing that, and working around it would mean relying on undocumented internals that break with every browser update. We will not ship that, and the report says so on its first page. If browser-stored passwords are your concern, the Breach \u0026amp; Identity Exposure Check is the product that addresses it.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eA clear list of stored credentials by name, so you can decide what to remove.\u003c\/li\u003e\n\u003cli\u003eStep-by-step instructions for clearing saved logins and enrolling stronger sign-in.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003ePeople who connect to other machines from this one, shared or hand-me-down computers, and anyone who has never cleared out what Windows has quietly remembered.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It lists credential entries by name; it never reads, decrypts, transmits or cracks a stored password, never exploits a weakness, and changes nothing. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669341496,"sku":"PW-HYGIENE-11","price":29.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PW-HYGIENE-11_7dd239ee-8202-4da2-91f0-4c8978e64560.png?v=1788709337"},{"product_id":"quickscan-digital-footprint-report","title":"Digital Footprint Report – What the Internet Knows About You","description":"\u003cp\u003e\u003cstrong\u003eBefore anyone targets you, they read up on you. This is the same homework, done in your favour.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Digital Footprint Report assembles what is publicly discoverable about you or your business from open sources, and frames it the way an attacker would: not as trivia, but as the raw material for a convincing phone call, invoice or password reset.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eDomain registration records — whether your name, address, email and phone number are sitting unredacted in the public register instead of behind the registrar's privacy service\u003c\/li\u003e\n\u003cli\u003eAccount footprint across major public platforms, using each platform's own public lookup rather than scraping\u003c\/li\u003e\n\u003cli\u003eContact details sitting in plain text on your own website, ready to be harvested by spam and phishing operations\u003c\/li\u003e\n\u003cli\u003eHow the pieces combine — the point where several harmless facts become one credible pretext\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA visual exposure map placing you at the centre with each discovered exposure radiating out.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the social-engineering angle explained.\u003c\/li\u003e\n\u003cli\u003ePractical removal and reduction steps — what to redact, what to move behind a form, what to leave alone.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusiness owners whose details are on a domain registration, professionals with a public profile, and anyone who has been targeted by a convincing scam and wants to know where the details came from.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe domain and usernames you want checked — they must be yours\u003c\/li\u003e\n\u003cli\u003eAbout 10 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It queries public records and public platform lookups; it never accesses a private account, never exploits a weakness, and changes nothing. It is not a certification, an audit or an attestation, and it is not a people-search service — run it on yourself or your own business only.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669374264,"sku":"FOOTPRINT-12","price":49.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-FOOTPRINT-12_fc3f112f-0155-489c-a767-69444f2fecff.png?v=1788709337"},{"product_id":"quickscan-cloud-file-sharing-check","title":"Cloud File Sharing Check – Microsoft 365 and Google Workspace Exposure Scan","description":"\u003cp\u003e\u003cstrong\u003e\"Anyone with the link\" is a decision someone made once, three years ago, about a file that still exists.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Cloud File Sharing Check inventories how your organisation's cloud files are actually shared — not how you assume they are shared — and surfaces the links, guests and permissions that have quietly outlived their purpose.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eFiles and folders shared with \"anyone with the link\", including ones no longer accessed by anyone inside the business\u003c\/li\u003e\n\u003cli\u003eExternal guest accounts with standing access to your content\u003c\/li\u003e\n\u003cli\u003eSharing that survived a staff departure or a finished project\u003c\/li\u003e\n\u003cli\u003eTenant-wide sharing defaults, and whether they permit more than you intended\u003c\/li\u003e\n\u003cli\u003eWhere sensitive-looking content and permissive sharing overlap\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eBefore you buy — what this one needs from you\u003c\/h3\u003e\u003cp\u003eUnlike the rest of the QuickScan line, this product reads from your cloud tenant, so it needs a credential you create and control:\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eYou must be a global or equivalent administrator of the Microsoft 365 or Google Workspace tenant.\u003c\/li\u003e\n\u003cli\u003eYou will register a read-only application in your own tenant and paste its secret into a masked prompt. The secret stays on your machine and is never transmitted to us.\u003c\/li\u003e\n\u003cli\u003eBecause it needs that secret, this product is sold on its own and is deliberately excluded from every QuickScan bundle — no bundle can supply it, and a bundle that silently skipped it would be worse than no scan at all.\u003c\/li\u003e\n\u003cli\u003eSetup instructions are included and written step by step.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery exposure rated Critical \/ High \/ Medium \/ Low, with the file or folder named.\u003c\/li\u003e\n\u003cli\u003eA prioritised revocation list — what to unshare first.\u003c\/li\u003e\n\u003cli\u003eRecommended tenant-level settings so the same drift does not happen again.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusinesses running on Microsoft 365 or Google Workspace that have shared files with clients, contractors and former staff and have never gone back to look.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAdministrator access to your own Microsoft 365 or Google Workspace tenant\u003c\/li\u003e\n\u003cli\u003eAbout 30 minutes including the one-time app registration\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads sharing metadata; it does not read, copy or transmit the contents of your files, never exploits a weakness, and changes no permission on your tenant. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669570872,"sku":"CLOUDSHARE-14","price":99.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-CLOUDSHARE-14_0e521593-2bf8-4ee4-8853-9f63cbb0c9a7.png?v=1788709337"},{"product_id":"quickscan-travel-public-wifi-check","title":"Travel \u0026 Public Wi-Fi Check – Laptop Safety on Untrusted Networks","description":"\u003cp\u003e\u003cstrong\u003eA laptop configured for your office is not configured for an airport.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Travel \u0026amp; Public Wi-Fi Check is the pre-flight inspection for a machine that is about to sit on networks you do not control. It takes three minutes and catches the settings that quietly expose a laptop the moment it leaves home.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eFile and printer sharing left switched on — the single most common way a laptop leaks on a hotel network\u003c\/li\u003e\n\u003cli\u003eWhich firewall profile Windows applies when it joins an unfamiliar network\u003c\/li\u003e\n\u003cli\u003eRemembered open and hotel networks your laptop will silently rejoin, anywhere in the world\u003c\/li\u003e\n\u003cli\u003eWhether a VPN is present and configured, and whether anything forces traffic through it\u003c\/li\u003e\n\u003cli\u003eNetwork discovery and name broadcast settings that announce your machine to the room\u003c\/li\u003e\n\u003cli\u003eDrive encryption status — what happens to your data if the bag goes missing\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eA short pre-travel checklist you can reuse before every trip.\u003c\/li\u003e\n\u003cli\u003eStep-by-step fix instructions written for a normal computer user, not an engineer.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone who works from cafes, hotels, airports or client sites — and anyone handing a laptop to someone who does.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 3 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It inspects your own machine's settings; it never touches other devices on the network, never exploits a weakness, and leaves nothing running behind it. It is not a VPN and it is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669603640,"sku":"MOBILE-WIFI-15","price":19.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-MOBILE-WIFI-15_c1c0254b-19b4-4844-8ec6-ffeebeb5d48f.png?v=1788709337"},{"product_id":"quickscan-out-of-date-software-scan","title":"Out-of-Date Software Scan – End-of-Life and Patch Risk Check","description":"\u003cp\u003e\u003cstrong\u003eUnpatched software is behind more breaches than any clever attack. It is also the cheapest thing to fix.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Out-of-Date Software Scan inventories what is installed on your computer and separates the merely old from the genuinely dangerous — the products whose vendor has stopped issuing security updates entirely, which means every flaw found from now on stays open forever.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eEvery installed application and its version\u003c\/li\u003e\n\u003cli\u003eProducts that have passed end-of-life and will never receive another security update\u003c\/li\u003e\n\u003cli\u003eYour Windows edition and build against its own support lifecycle\u003c\/li\u003e\n\u003cli\u003eOverdue operating system security updates\u003c\/li\u003e\n\u003cli\u003eBrowsers and runtimes — the components attackers reach through first\u003c\/li\u003e\n\u003cli\u003eSoftware still installed but no longer used, which is risk with no upside\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with end-of-life dates named.\u003c\/li\u003e\n\u003cli\u003ePatch evidence you can attach to a cyber-insurance application — insurers commonly ask for a 7–15 day patching commitment.\u003c\/li\u003e\n\u003cli\u003eA clear \"update this, replace this, uninstall this\" action list.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone still running software they installed years ago, small businesses with an insurance questionnaire in front of them, and people who want the cheapest meaningful first check.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads what is installed; it never installs, updates, removes or changes any software on your machine, and leaves nothing running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669636408,"sku":"EOL-16","price":19.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-EOL-16_ee08252e-af35-454d-b97c-d6e417ef3707.png?v=1788709338"},{"product_id":"quickscan-insider-risk-self-assessment","title":"Insider Risk Self-Assessment – Cyber Insurance Readiness Check","description":"\u003cp\u003e\u003cstrong\u003eBetween 80% and 96% of cyber-insurance applications turn on the same handful of controls. This tells you how you would score before you sign the form.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Insider Risk Self-Assessment is a guided review of the people-and-process side of security — the part no scanner can see. It walks you through the questions an insurer, an auditor or a large client will ask, records your answers, and returns a scored report showing where you stand and what to fix first.\u003c\/p\u003e\u003ch3\u003eWhat it covers\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eMulti-factor authentication — where it is enforced, and where it is quietly optional\u003c\/li\u003e\n\u003cli\u003eJoiner, mover and leaver process: what actually happens to access when someone leaves\u003c\/li\u003e\n\u003cli\u003eLeast privilege — who has more access than their job needs\u003c\/li\u003e\n\u003cli\u003eThird-party and contractor access to your systems and data\u003c\/li\u003e\n\u003cli\u003eBackup and recovery practice, including whether a restore has ever been tested\u003c\/li\u003e\n\u003cli\u003eIncident response: who is called, in what order, at 2am\u003c\/li\u003e\n\u003cli\u003eAcceptable use, device and data-handling expectations set in writing\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA control-by-control scored readiness picture, rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eAnswers written in the language insurance applications use, so you can transcribe them straight across.\u003c\/li\u003e\n\u003cli\u003eA prioritised remediation plan for the gaps, cheapest and highest-impact first.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses applying for or renewing cyber insurance, businesses being vetted by a larger client, and owners who suspect their weakest link is a process rather than a machine.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 15 minutes and honest answers\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eThis assessment is built from your own answers, and the report says so — it reflects what you told it, not an independent verification. It is not a certification, an audit or an attestation, and it is not insurance advice. It pairs naturally with the Account \u0026amp; Access Review, which checks the technical side of the same questions.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669669176,"sku":"INSIDER-21","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-INSIDER-21_7d8a5747-078c-4974-b8e9-3f97b109de43.png?v=1788709337"},{"product_id":"quickscan-router-wifi-settings-checklist","title":"Router \u0026 Wi-Fi Settings Checklist – Guided Router Security Review","description":"\u003cp\u003e\u003cstrong\u003eYour router is the one device protecting everything else, and almost nobody has ever opened its settings page.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Router \u0026amp; Wi-Fi Settings Checklist walks you through the settings that decide whether your network is defensible, one plain question at a time, and checks what it can observe from the network side. You do not need to know what any of the acronyms mean — that is the point.\u003c\/p\u003e\u003ch3\u003eWhat it covers\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhether the router's administrator password is still the one printed on the sticker\u003c\/li\u003e\n\u003cli\u003eRemote administration from the internet — switched on by default on more routers than you would expect\u003c\/li\u003e\n\u003cli\u003eUPnP, the feature that lets any program on your network open a hole in your firewall without asking you\u003c\/li\u003e\n\u003cli\u003eWPS push-button pairing, a long-broken convenience feature\u003c\/li\u003e\n\u003cli\u003eFirmware age, and whether your model still receives updates at all\u003c\/li\u003e\n\u003cli\u003eGuest network separation — whether visitors and smart devices can reach your computers\u003c\/li\u003e\n\u003cli\u003eWi-Fi encryption standard and password strength\u003c\/li\u003e\n\u003cli\u003eObservable services answering on the router itself\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA scored checklist, with each item rated Critical \/ High \/ Medium \/ Low.\u003c\/li\u003e\n\u003cli\u003eSpecific guidance for each answer you gave — including a genuine \"here is how to find out\" path when you did not know, rather than assuming the worst.\u003c\/li\u003e\n\u003cli\u003eStep-by-step instructions for changing each setting, written for a non-technical reader.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eEvery household and small office running on a router supplied by an internet provider, and anyone who has never logged into theirs.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, connected to the network you want reviewed\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 10 minutes, plus access to your router's settings page if you want to answer everything\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It never logs into your router, never changes a setting, never guesses a password, and leaves nothing running behind it. Part of this review is based on your own answers, and the report states which findings came from you rather than from observation. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913669701944,"sku":"ROUTER-22","price":29.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-ROUTER-22_c6e084c6-082b-4f0a-8bbb-c47250e0c7bc.png?v=1788709337"},{"product_id":"quickscan-startup-persistence-audit","title":"Startup \u0026 Persistence Check – What Runs When Your PC Turns On","description":"\u003cp\u003e\u003cstrong\u003eMalware's first job is to survive a restart. This shows you everything that has arranged to.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Startup \u0026amp; Persistence Check lists every mechanism on your computer that causes something to run automatically — the same places an investigator looks first — and separates the ordinary from the suspicious. Expert tools show you the raw list. This explains it.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eStartup programs across all registry run locations and startup folders\u003c\/li\u003e\n\u003cli\u003eScheduled tasks, including ones set to trigger on logon, idle or a timer\u003c\/li\u003e\n\u003cli\u003eWindows services set to start automatically, and who publishes them\u003c\/li\u003e\n\u003cli\u003eBrowser extensions with standing permission to read what you do\u003c\/li\u003e\n\u003cli\u003eDigital signatures — which of these are signed by a publisher you can identify, and which are not\u003c\/li\u003e\n\u003cli\u003eItems running from unusual locations such as temporary or user-data folders\u003c\/li\u003e\n\u003cli\u003eThe cumulative effect on how long your machine takes to become usable\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery item classified and rated Critical \/ High \/ Medium \/ Low, with unsigned and oddly-located entries called out.\u003c\/li\u003e\n\u003cli\u003eA safe-to-disable list, so you can cut boot time without breaking anything.\u003c\/li\u003e\n\u003cli\u003eClear guidance on anything that warrants a closer look, and what to do next.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone whose computer has become slow, anyone who has clicked something they regret, and anyone buying or inheriting a used machine.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It lists and explains; it never disables, deletes or quarantines anything on your machine, and leaves nothing running behind it. It is not antivirus, and it is not a certification, an audit or an attestation — if the report suggests an active compromise, it says so and tells you to stop and get help.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670095160,"sku":"PERSIST-24","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PERSIST-24_c8247db3-61a0-4b99-ad93-2cc0503ea58f.png?v=1788709338"},{"product_id":"quickscan-linux-server-hardening-check","title":"Linux Server Hardening Check – Configuration and Exposure Review","description":"\u003cp\u003e\u003cstrong\u003eThe free hardening tools produce a wall of output. This produces a report you can act on and hand to someone else.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Linux Server Hardening Check reviews the configuration of a Linux server you own — a VPS, a cloud instance, an office box — against the settings that decide whether a routine internet scan finds a way in. It is the only product in the QuickScan line that runs on Linux rather than Windows.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eSSH configuration: root login, password authentication, key handling and exposure to the open internet\u003c\/li\u003e\n\u003cli\u003eEvery service listening on a network port, and whether it needs to be\u003c\/li\u003e\n\u003cli\u003eFirewall rules and whether they match what is actually running\u003c\/li\u003e\n\u003cli\u003eUser accounts, sudo privileges and accounts that can log in but should not\u003c\/li\u003e\n\u003cli\u003eAvailable security updates and how far behind the system has drifted\u003c\/li\u003e\n\u003cli\u003eFile permissions on sensitive paths, world-writable files and unexpected SUID binaries\u003c\/li\u003e\n\u003cli\u003eLogging and audit configuration — whether you would have any record after an incident\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the exposure explained rather than just flagged.\u003c\/li\u003e\n\u003cli\u003eExact configuration changes to make, with the file and directive named.\u003c\/li\u003e\n\u003cli\u003eAn executive summary that a non-technical owner can read.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone running a Linux server they set up once and have not revisited — a website host, an application server, a home lab that ended up doing real work.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA Linux server you own or administer (this product does \u003cstrong\u003enot\u003c\/strong\u003e run on Windows)\u003c\/li\u003e\n\u003cli\u003eRoot or sudo access\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 10 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads configuration; it never changes a setting, never installs anything permanent, never exploits a weakness. Because it is Linux-only it cannot be included in the Windows QuickScan bundles and is sold on its own. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670127928,"sku":"SERVER-25","price":79.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-SERVER-25_64d1e094-0eed-4e96-b11a-c61880c798e5.png?v=1788709338"},{"product_id":"quickscan-active-directory-health-check","title":"Active Directory Health Check – Windows Domain Security Review","description":"\u003cp\u003e\u003cstrong\u003eIf you run a Windows domain, Active Directory is the master key to your entire business. Very few small businesses have ever had it looked at.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Active Directory Health Check reviews the domain configuration decisions that ransomware operators exploit to move from one infected desktop to every server you own. The community tools that do this are built for consultants; this returns a report an owner can read.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eMembership of Domain Admins and other privileged groups — usually larger than anyone remembers\u003c\/li\u003e\n\u003cli\u003eAccounts that have not logged in for months but remain enabled\u003c\/li\u003e\n\u003cli\u003eService accounts with excessive rights and passwords that never expire\u003c\/li\u003e\n\u003cli\u003eDomain password and lockout policy\u003c\/li\u003e\n\u003cli\u003eDelegation settings that let one compromised machine act as another\u003c\/li\u003e\n\u003cli\u003eDomain controller configuration and legacy protocol support\u003c\/li\u003e\n\u003cli\u003eGroup Policy settings that weaken the whole domain in one line\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eBefore you buy\u003c\/h3\u003e\u003cp\u003eThis product only produces meaningful results on a computer \u003cstrong\u003ejoined to a Windows domain\u003c\/strong\u003e. On a standalone home or small-office PC with no domain, there is nothing for it to examine — if you are not sure whether you have a domain, you almost certainly do not, and the Account \u0026amp; Access Review is the right product for you instead.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the attack path it enables described.\u003c\/li\u003e\n\u003cli\u003eA privileged-account inventory you can act on immediately.\u003c\/li\u003e\n\u003cli\u003eA prioritised remediation plan ordered by blast radius.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses running a Windows domain with no full-time systems administrator, and IT generalists who inherited a domain someone else built.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, joined to the domain you want reviewed\u003c\/li\u003e\n\u003cli\u003eRun as administrator, with an account that can read directory objects\u003c\/li\u003e\n\u003cli\u003eAbout 10 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads directory information; it never changes an object, never resets a password, never exploits a weakness, and leaves nothing running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670160696,"sku":"ADHEALTH-26","price":99.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-ADHEALTH-26_a889290f-7e40-4dea-83a6-9f620e268a77.png?v=1788709360"},{"product_id":"quickscan-cloud-storage-exposure-check","title":"Cloud Storage Exposure Check – Public Bucket and Blob Scan","description":"\u003cp\u003e\u003cstrong\u003ePublicly readable cloud storage is behind a remarkable share of the leaks you read about. Nobody ever chooses it on purpose.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Cloud Storage Exposure Check tests whether the storage buckets and containers associated with your business can be listed or read by an anonymous stranger — exactly the way an outsider would find out, using no credentials at all.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhether named storage buckets and containers respond to an anonymous request\u003c\/li\u003e\n\u003cli\u003eWhether their contents are publicly listable — the difference between one shared file and your whole archive\u003c\/li\u003e\n\u003cli\u003eWhether individual objects can be read without authentication\u003c\/li\u003e\n\u003cli\u003eBucket names derived from your domain and brand, which is how they get found in the first place\u003c\/li\u003e\n\u003cli\u003eStorage endpoints referenced directly by your own website\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery exposure rated Critical \/ High \/ Medium \/ Low, with what an anonymous visitor can currently see.\u003c\/li\u003e\n\u003cli\u003eProvider-specific instructions for closing the access without breaking your site.\u003c\/li\u003e\n\u003cli\u003eGuidance on the settings that stop it recurring.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusinesses using cloud storage for backups, media, customer documents or website assets — particularly where a developer or agency set it up and moved on.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain and any storage names you want checked — they must be yours\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It makes the same anonymous request any visitor could; it never downloads your data, never uses credentials, never exploits a weakness, and changes nothing. Only run it against storage you own or are authorised to test. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670226232,"sku":"BUCKET-28","price":49.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-BUCKET-28_966753a8-6fd2-4c8c-8ad7-c69a96b46709.png?v=1788709360"},{"product_id":"quickscan-computer-protection-pack","title":"Computer Essentials Pack – 6 PC Security Scans, One Report","description":"\u003cp\u003e\u003cstrong\u003eSix checks of one computer, run from a single file, analysed together instead of separately.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Computer Essentials Pack is the whole endpoint picture: what is protecting the machine, who can log into it, what runs when it starts, what has stopped receiving updates, and whether you could recover if it all went wrong. One download, one set of questions, one report.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e — firewall, antivirus, encryption, updates ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRansomware Readiness Check\u003c\/strong\u003e — backups, shadow copies, recovery ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAccount \u0026amp; Access Review\u003c\/strong\u003e — accounts, privileges, screen lock ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCredential Hygiene Check\u003c\/strong\u003e — password age, saved logins, Windows Hello ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e — end-of-life software and overdue patches ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStartup \u0026amp; Persistence Check\u003c\/strong\u003e — what runs automatically, and why ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $194. This pack: $99.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the pack beats six separate scans\u003c\/h3\u003e\u003cp\u003eIndividual findings are graded on their own. In a pack they are graded together. A missing backup is a Medium on its own; a missing backup plus Remote Desktop exposed plus an unpatched system is a complete ransomware path, and the report names it as one. Findings that appear in more than one scan are merged and marked as corroborated instead of padding the list, and anything a scan could not complete is reported as a named gap — never quietly counted as a pass.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eAn overall security score per surface, plus a combined picture of the machine.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis showing how separate weaknesses combine into one real risk.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan ordered by impact, not by which scan found it.\u003c\/li\u003e\n\u003cli\u003eAn appendix with the full detail from each of the six scans.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone who wants one computer properly looked at. A one-time remote repair visit from a high-street service costs about $150 and fixes one problem without producing a report; this examines six areas and hands you the findings in writing.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes for all six scans\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing in this pack exploits a weakness, changes a setting on your machine, or leaves anything running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670259000,"sku":"PACK-COMPUTER-50","price":99.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PACK-COMPUTER-50_dc821ce0-3c7d-4e84-81af-5389da86ac7a.png?v=1788709360"},{"product_id":"quickscan-home-office-network-pack","title":"Home \u0026 Office Network Pack – 3 Network Security Scans, One Report","description":"\u003cp\u003e\u003cstrong\u003eEverything that touches your network, checked in one run.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Home \u0026amp; Office Network Pack covers the three layers that decide whether your network is defensible: the wireless you connect to, the router that guards the edge, and the smart devices quietly sitting behind it.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWi-Fi \u0026amp; Home Network Check\u003c\/strong\u003e — encryption strength, auto-connect risk, device discovery ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRouter \u0026amp; Wi-Fi Settings Checklist\u003c\/strong\u003e — default passwords, UPnP, remote admin, WPS, firmware ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eSmart Device Exposure Scan\u003c\/strong\u003e — Telnet, RTSP cameras, MQTT brokers, open admin panels ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $97. This pack: $69.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the pack beats three separate scans\u003c\/h3\u003e\u003cp\u003eThese three checks answer each other. A camera with an open web panel is a Medium finding on its own; the same camera behind a router with UPnP enabled and a default admin password is a route from the internet into your house, and the report says so as one finding rather than three. Anything a scan could not complete is reported as a named gap, never quietly counted as a pass.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA per-surface score and a combined view of your network.\u003c\/li\u003e\n\u003cli\u003eA full device inventory you can keep and compare later.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis showing how the weaknesses combine.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan ordered by impact.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eHouseholds and small offices running on provider-supplied networking gear with smart devices added over time. A year of a consumer network-monitoring app costs about the same and never writes you a report.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, connected to the network you want checked\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or manage the network\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing in this pack logs into a device, cracks a password, exploits a weakness or changes a setting. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670553912,"sku":"PACK-NETWORK-51","price":69.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PACK-NETWORK-51_db3cc822-da4e-4c13-9ebe-f42867f6bed5.png?v=1788709360"},{"product_id":"quickscan-website-domain-pack","title":"Website \u0026 Domain Pack – 3 Internet-Facing Security Scans, One Report","description":"\u003cp\u003e\u003cstrong\u003eEverything a stranger can see about your business online, checked in one run.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Website \u0026amp; Domain Pack covers your entire internet-facing footprint: what answers on your public address, what your website itself gives away, and whether the encryption protecting both is in order.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eInternet Exposure Scan\u003c\/strong\u003e — open ports, exposed remote access, service banners ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWebsite \u0026amp; Storefront Checkup\u003c\/strong\u003e — security headers, exposed paths, version disclosure ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate \u0026amp; Encryption Check\u003c\/strong\u003e — expiry, issuer, protocol and cipher strength ($19)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $157. This pack: $99.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the pack beats three separate scans\u003c\/h3\u003e\u003cp\u003eAll three look at the same perimeter from different angles, so they corroborate each other. A certificate flagged by more than one scan is merged into a single finding marked as confirmed, rather than repeated three times to pad the report. An exposed admin path plus a disclosed software version plus a weak protocol is not three medium problems — it is one route in, and the report describes it that way.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA per-surface score and a combined external risk picture.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis showing how the exposures combine.\u003c\/li\u003e\n\u003cli\u003eA 90-day remediation plan ordered by what an attacker reaches for first.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can forward to your host or developer.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusinesses with a website, a domain and a public IP, who want a full external picture without committing to a recurring scanner. A month of the cheapest hosted equivalent costs roughly the same as this whole pack.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 25 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to test the domain and address you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing in this pack logs in, submits an attack payload, exploits a weakness or changes anything on your systems. It is not a penetration test, a certification, an audit or an attestation — if it surfaces something serious, it points you to ThreatVector's hands-on Internet Exposure Security Scan.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670619448,"sku":"PACK-WEB-52","price":99.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PACK-WEB-52_184226c5-7bbf-4a82-8616-a8072d3e351e.png?v=1788709360"},{"product_id":"quickscan-identity-email-exposure-pack","title":"Identity \u0026 Email Exposure Pack – 3 Personal Data Scans, One Report","description":"\u003cp\u003e\u003cstrong\u003eEverything about you that is already public, and everything a criminal could do with it.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Identity \u0026amp; Email Exposure Pack is the impersonation picture: what has leaked, what is discoverable, and whether someone could convincingly send email as you using the two together.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e — breach corpora, paste sites, certificate transparency ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Footprint Report\u003c\/strong\u003e — unredacted domain records, account footprint, harvestable contact details ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEmail Spoofing \u0026amp; BEC Check\u003c\/strong\u003e — SPF, DKIM, DMARC and relay configuration ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $127. This pack: $89.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the pack beats three separate scans\u003c\/h3\u003e\u003cp\u003eThese three are the ingredients of one attack. A leaked password is a problem; a leaked password plus your name and phone number sitting in a public domain record plus a domain anyone can forge is a business email compromise waiting to be written. The pack correlates all three into a single account-takeover and impersonation narrative, and shows the exposure as a visual map rather than three separate lists.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA visual exposure map with you at the centre and every discovered exposure radiating out.\u003c\/li\u003e\n\u003cli\u003eA per-surface score and a combined impersonation risk picture.\u003c\/li\u003e\n\u003cli\u003eA prioritised action list: what to change, what to redact, what DNS record to publish.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusiness owners who invoice customers, professionals with a public profile, and anyone who has been targeted by a convincing scam and wants to know where the details came from. Consumer identity suites charge $95 or more a year to monitor a subset of this.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe email addresses, domain and usernames you want checked — they must be yours\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003ePrefer to keep watching?\u003c\/h3\u003e\u003cp\u003eNew breaches surface every week. The \u003cstrong\u003eQuarterly Identity Checkup\u003c\/strong\u003e runs these same three scans four times a year for $99 and shows you what appeared since last time — $10 more than this pack for four times the coverage.\u003c\/p\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It searches public records; it does not buy data, access criminal marketplaces on your behalf, exploit a weakness, or change anything. It is not a people-search service — run it on yourself or your own business only. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913670652216,"sku":"PACK-IDENTITY-53","price":89.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PACK-IDENTITY-53_49a17754-67cb-48da-afe2-60bec1c19c6f.png?v=1788709361"},{"product_id":"quickscan-quarterly-home-checkup","title":"Quarterly Home Checkup – 6 Scans, Every 90 Days, With Trend Reporting","description":"\u003cp\u003e\u003cstrong\u003eSecurity is not a thing you check once. It is a thing that drifts.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Quarterly Home Checkup runs six scans across your computer and your home network, then does it again every 90 days — and every report after the first shows you what changed: what you fixed, what came back, and what appeared while you were not looking.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRansomware Readiness Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWi-Fi \u0026amp; Home Network Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eSmart Device Exposure Scan\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003e$194 of scans per run. Annual plan: $149 for four runs — under $37 a quarter.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eHow the annual plan works\u003c\/h3\u003e\u003cp\u003eThe first run happens the moment you are ready. The launcher then schedules itself to run again every 90 days on your own machine, using the answers you already gave, so you do not have to remember. Four reports over twelve months, each one a comparison against the last.\u003c\/p\u003e\u003ch3\u003eWhy the second report is worth more than the first\u003c\/h3\u003e\u003cp\u003eThe first report tells you where you stand. Every report after it tells you whether you are getting better — which findings you resolved, which have reappeared, which new devices joined your network, and which new breaches now include your email. That trend line is the entire point of a recurring checkup, and it is what a one-off scan can never give you.\u003c\/p\u003e\u003ch3\u003eWhat you get, every quarter\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day of each run.\u003c\/li\u003e\n\u003cli\u003eA per-surface score plus your combined household picture.\u003c\/li\u003e\n\u003cli\u003eA resolved \/ still open \/ newly found comparison against your previous run.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all six scans.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan sized to what you can realistically do before the next run.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eChoosing your option\u003c\/h3\u003e\u003cp\u003e\u003cstrong\u003eAnnual Plan\u003c\/strong\u003e — four scheduled runs over twelve months with trend reporting. \u003cstrong\u003eSingle Run\u003c\/strong\u003e — one run, one report, no scheduling, if you want to try it first.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, on the machine and network you want checked\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 25 minutes for the first run; later runs are unattended\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here exploits a weakness or changes a setting on your machine. The only thing it leaves behind is the scheduled task that runs the next checkup, and you can remove it at any time from the launcher. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eYour report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Annual Plan – 4 quarterly runs","offer_id":52913670684984,"sku":"QTR-HOME-30","price":149.0,"currency_code":"USD","in_stock":true},{"title":"Single Run","offer_id":52913670717752,"sku":"QTR-HOME-30-1RUN","price":49.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-QTR-HOME-30_0c317b64-cf2b-432b-855c-6113420b3756.png?v=1788709361"},{"product_id":"quickscan-quarterly-remote-worker-checkup","title":"Quarterly Remote Worker Checkup – 6 Scans for a Laptop That Travels","description":"\u003cp\u003e\u003cstrong\u003eA laptop that works from cafes, hotels and client sites collects risk the way it collects Wi-Fi networks.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Quarterly Remote Worker Checkup is six scans chosen specifically for a machine that leaves the building, repeated every 90 days so the drift gets caught before it matters.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTravel \u0026amp; Public Wi-Fi Check\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCredential Hygiene Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStartup \u0026amp; Persistence Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003e$174 of scans per run. Annual plan: $129 for four runs — about $32 a quarter.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eHow the annual plan works\u003c\/h3\u003e\u003cp\u003eThe first run happens when you are ready. The launcher then schedules itself every 90 days on your machine using the answers you already gave. Four reports over twelve months, each compared against the last.\u003c\/p\u003e\u003ch3\u003eWhy quarterly matters for a travelling laptop\u003c\/h3\u003e\u003cp\u003eThis is the machine most likely to accumulate remembered open networks, stale saved credentials to other systems, and software that quietly fell out of support between trips. A single scan tells you the state today; four tell you whether your habits are holding.\u003c\/p\u003e\u003ch3\u003eWhat you get, every quarter\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day of each run.\u003c\/li\u003e\n\u003cli\u003eA per-surface score and a combined picture of the device.\u003c\/li\u003e\n\u003cli\u003eA resolved \/ still open \/ newly found comparison against your previous run.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all six scans — particularly saved credentials plus persistence plus breach exposure.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan sized to what you can actually finish.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eChoosing your option\u003c\/h3\u003e\u003cp\u003e\u003cstrong\u003eAnnual Plan\u003c\/strong\u003e — four scheduled runs over twelve months with trend reporting. \u003cstrong\u003eSingle Run\u003c\/strong\u003e — one run, one report, no scheduling.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11 laptop\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 25 minutes for the first run; later runs are unattended\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here exploits a weakness or changes a setting on your machine. It never reads, decrypts or transmits a stored password. It is not a VPN, and it is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eYour report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Annual Plan – 4 quarterly runs","offer_id":52913670750520,"sku":"QTR-LAPTOP-31","price":129.0,"currency_code":"USD","in_stock":true},{"title":"Single Run","offer_id":52913670783288,"sku":"QTR-LAPTOP-31-1RUN","price":45.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-QTR-LAPTOP-31_e744d5c2-84be-4002-af0f-9cb05f4b964d.png?v=1788709361"},{"product_id":"quickscan-quarterly-small-office-checkup","title":"Quarterly Small Office Checkup – 8 Scans, Every 90 Days","description":"\u003cp\u003e\u003cstrong\u003eThe recurring security review a small office needs, without the monthly platform fee or the consultant.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Quarterly Small Office Checkup runs eight scans across your office computers, your network and the process controls insurers ask about — then repeats every 90 days with a report that shows exactly what moved.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRansomware Readiness Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAccount \u0026amp; Access Review\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStartup \u0026amp; Persistence Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWi-Fi \u0026amp; Home Network Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRouter \u0026amp; Wi-Fi Settings Checklist\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInsider Risk Self-Assessment\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003e$262 of scans per run. Annual plan: $299 for four runs — $75 a quarter.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eHow the annual plan works\u003c\/h3\u003e\u003cp\u003eThe first run happens when you are ready. The launcher schedules itself every 90 days using the answers you already gave. Four reports over twelve months, each one a comparison against the last.\u003c\/p\u003e\u003ch3\u003eWhy an office needs the recurring version\u003c\/h3\u003e\u003cp\u003eOffices change: staff join and leave, devices get added, someone plugs in a printer, a laptop falls behind on patches. The quarterly comparison is what turns a scan into evidence — a documented record that you check, and that findings get closed. That record is what an insurer or a larger client is actually asking for. The cheapest hosted vulnerability scanner runs $468 a year and does not produce a written analysis.\u003c\/p\u003e\u003ch3\u003eWhat you get, every quarter\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day of each run.\u003c\/li\u003e\n\u003cli\u003eA per-surface score and a combined office risk picture.\u003c\/li\u003e\n\u003cli\u003eA resolved \/ still open \/ newly found comparison against your previous run.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all eight scans.\u003c\/li\u003e\n\u003cli\u003eAnswers phrased for a cyber-insurance application.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan ordered by impact.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eChoosing your option\u003c\/h3\u003e\u003cp\u003e\u003cstrong\u003eAnnual Plan\u003c\/strong\u003e — four scheduled runs over twelve months with trend reporting. \u003cstrong\u003eSingle Run\u003c\/strong\u003e — one run, one report, no scheduling.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, on the office machine and network you want checked\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 40 minutes for the first run; later runs are unattended\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here exploits a weakness or changes a setting. Part of the Insider Risk assessment is based on your own answers, and the report states which findings came from you rather than from observation. It is not a certification, an audit or an attestation, and it is not insurance advice.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eYour report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Annual Plan – 4 quarterly runs","offer_id":52913670816056,"sku":"QTR-OFFICE-32","price":299.0,"currency_code":"USD","in_stock":true},{"title":"Single Run","offer_id":52913670848824,"sku":"QTR-OFFICE-32-1RUN","price":119.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-QTR-OFFICE-32_65322e8e-dd89-484c-9a67-9e8787bde170.png?v=1788709361"},{"product_id":"quickscan-quarterly-web-presence-checkup","title":"Quarterly Web Presence Checkup – 6 Internet-Facing Scans, Every 90 Days","description":"\u003cp\u003e\u003cstrong\u003eYour external footprint changes every time someone adds a subdomain, renews a certificate, or spins up a bucket for one job.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Quarterly Web Presence Checkup covers everything your business exposes to the internet and rechecks it every 90 days, so drift is caught in weeks rather than after an incident.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eInternet Exposure Scan\u003c\/strong\u003e ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWebsite \u0026amp; Storefront Checkup\u003c\/strong\u003e ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate \u0026amp; Encryption Check\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEmail Spoofing \u0026amp; BEC Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCloud Storage Exposure Check\u003c\/strong\u003e ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Footprint Report\u003c\/strong\u003e ($49)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003e$294 of scans per run. Annual plan: $349 for four runs — $87 a quarter.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eHow the annual plan works\u003c\/h3\u003e\u003cp\u003eThe first run happens when you are ready. The launcher schedules itself every 90 days using the answers you already gave. Four reports over twelve months, each compared against the last.\u003c\/p\u003e\u003ch3\u003eWhy quarterly matters for a web presence\u003c\/h3\u003e\u003cp\u003eCertificates expire on a schedule. New subdomains appear in public certificate logs the moment they are issued. Storage gets opened for one file and never closed. A quarterly rhythm catches all three while they are still cheap to fix — and gives you a documented history that a client's security questionnaire will ask for. A hosted scanner covering less than this starts at $468 a year, and a DMARC platform is another $432 on top.\u003c\/p\u003e\u003ch3\u003eWhat you get, every quarter\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day of each run.\u003c\/li\u003e\n\u003cli\u003eA per-surface score and a combined external risk picture.\u003c\/li\u003e\n\u003cli\u003eA resolved \/ still open \/ newly found comparison against your previous run.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all six scans — exposed service plus weak certificate plus forgeable domain is one story, not six findings.\u003c\/li\u003e\n\u003cli\u003eA 90-day remediation plan ordered by what an attacker reaches for first.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eChoosing your option\u003c\/h3\u003e\u003cp\u003e\u003cstrong\u003eAnnual Plan\u003c\/strong\u003e — four scheduled runs over twelve months with trend reporting. \u003cstrong\u003eSingle Run\u003c\/strong\u003e — one run, one report, no scheduling.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain, public address and storage names — you must own them or be authorised to test them\u003c\/li\u003e\n\u003cli\u003eAbout 40 minutes for the first run; later runs are unattended\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here logs in, submits an attack payload, exploits a weakness or changes anything on your systems. It is not a penetration test, a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eYour report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Annual Plan – 4 quarterly runs","offer_id":52913671143736,"sku":"QTR-WEB-33","price":349.0,"currency_code":"USD","in_stock":true},{"title":"Single Run","offer_id":52913671176504,"sku":"QTR-WEB-33-1RUN","price":109.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-QTR-WEB-33_7bfc44a6-42ae-4182-906a-c3912b440322.png?v=1788709377"},{"product_id":"quickscan-quarterly-identity-checkup","title":"Quarterly Identity Checkup – Breach Monitoring With a Written Report","description":"\u003cp\u003e\u003cstrong\u003eNew breaches surface every week. A scan you ran in January says nothing about what leaked in March.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Quarterly Identity Checkup runs the same three exposure scans four times a year and, from the second report onwards, leads with the only thing that has actually changed: what is new.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Footprint Report\u003c\/strong\u003e ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEmail Spoofing \u0026amp; BEC Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003e$127 of scans per run. Annual plan: $99 for four runs — $25 a quarter.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy this one is annual only\u003c\/h3\u003e\u003cp\u003eThis is the deliberately lopsided product in the range. A single run of these three scans is already sold as the \u003cstrong\u003eIdentity \u0026amp; Email Exposure Pack\u003c\/strong\u003e at $89. Four runs with a quarter-by-quarter comparison cost $99. For $10 more you get four times the coverage, because exposure is the one risk area where a snapshot ages faster than anything else — so if you only want one look, buy the pack; if you want to actually know, buy this.\u003c\/p\u003e\u003ch3\u003eHow the annual plan works\u003c\/h3\u003e\u003cp\u003eThe first run happens when you are ready. The launcher schedules itself every 90 days using the answers you already gave. Four reports over twelve months.\u003c\/p\u003e\u003ch3\u003eWhat you get, every quarter\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day of each run.\u003c\/li\u003e\n\u003cli\u003eA \"what's new since last time\" section at the front — new breaches, new paste hits, new subdomains, new public footprint.\u003c\/li\u003e\n\u003cli\u003eA visual exposure map you can compare quarter to quarter.\u003c\/li\u003e\n\u003cli\u003eAn impersonation and account-takeover risk picture combining all three scans.\u003c\/li\u003e\n\u003cli\u003eA prioritised action list: what to change, what to redact, what to publish.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe email addresses, domain and usernames you want watched — they must be yours\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes for the first run; later runs are unattended\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It searches public records; it does not buy data, access criminal marketplaces on your behalf, or change anything. It is not continuous monitoring — it is four scheduled checks a year with a written analysis each time. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eYour report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Annual Plan – 4 quarterly runs","offer_id":52913671209272,"sku":"QTR-IDENTITY-34","price":99.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-QTR-IDENTITY-34_a1b96cc0-fd4a-44ef-8085-3f5a457a37b5.png?v=1788709378"},{"product_id":"quickscan-quarterly-business-checkup","title":"Quarterly Business Checkup – 10 Scans, Every 90 Days, Insurance-Ready","description":"\u003cp\u003e\u003cstrong\u003eThe whole business, checked four times a year, documented in writing.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Quarterly Business Checkup is the recurring anchor of the QuickScan range: ten scans spanning your computers, your perimeter, your email domain and your identity exposure, repeated every 90 days, with each report showing what closed and what opened since the last one.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRansomware Readiness Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAccount \u0026amp; Access Review\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStartup \u0026amp; Persistence Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInternet Exposure Scan\u003c\/strong\u003e ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEmail Spoofing \u0026amp; BEC Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate \u0026amp; Encryption Check\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInsider Risk Self-Assessment\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003e$370 of scans per run. Annual plan: $599 for four runs — $150 a quarter.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhat it replaces\u003c\/h3\u003e\u003cp\u003eAn IT provider charges $1,000–$2,000 for one automated vulnerability assessment and $2,000–$4,000 for a standard one. A lightweight virtual-CISO retainer that includes quarterly reviews runs $2,000 a month and up. This is four documented reviews a year for $599 — automated, run on your own machine, and producing exactly the multi-factor, backup and patching evidence a cyber-insurance application asks for. A business already paying a four-figure annual premium is buying the evidence that keeps that policy honest.\u003c\/p\u003e\u003ch3\u003eHow the annual plan works\u003c\/h3\u003e\u003cp\u003eThe first run happens when you are ready. The launcher schedules itself every 90 days using the answers you already gave. Four reports over twelve months, each compared against the last.\u003c\/p\u003e\u003ch3\u003eWhat you get, every quarter\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day of each run.\u003c\/li\u003e\n\u003cli\u003eA score for every surface — endpoint, network, perimeter, email, identity — plus a combined business picture.\u003c\/li\u003e\n\u003cli\u003eA resolved \/ still open \/ newly found comparison against your previous run.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all ten scans, showing how separate findings assemble into a real intrusion path.\u003c\/li\u003e\n\u003cli\u003eAn executive summary written for an owner, a board or an insurer.\u003c\/li\u003e\n\u003cli\u003eA 90-day security programme, re-prioritised each quarter.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eChoosing your option\u003c\/h3\u003e\u003cp\u003e\u003cstrong\u003eAnnual Plan\u003c\/strong\u003e — four scheduled runs over twelve months with trend reporting. \u003cstrong\u003eSingle Run\u003c\/strong\u003e — one run, one report, no scheduling.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain and public address — you must own them or be authorised to test them\u003c\/li\u003e\n\u003cli\u003eAbout 50 minutes for the first run; later runs are unattended\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here exploits a weakness or changes a setting. Part of the Insider Risk assessment is based on your own answers, and the report states which findings came from you rather than from observation. It is not a certification, an audit, an attestation, or insurance advice — if a report surfaces a complete attack path, it says so and points you to ThreatVector's hands-on engagement.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eYour report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Annual Plan – 4 quarterly runs","offer_id":52913671242040,"sku":"QTR-BUSINESS-35","price":599.0,"currency_code":"USD","in_stock":true},{"title":"Single Run","offer_id":52913671274808,"sku":"QTR-BUSINESS-35-1RUN","price":199.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-QTR-BUSINESS-35_eff7db9d-95b0-4807-975d-789028f64ace.png?v=1788709378"},{"product_id":"quickscan-full-service-home-security-scan","title":"Full Service Home Security Scan – 12 Scans, One Complete Report","description":"\u003cp\u003e\u003cstrong\u003eThe deepest single look at a household's security we offer — twelve scans, one run, one report.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Full Service Home Security Scan covers every surface a home actually has: the computer, the credentials on it, the network it sits on, the smart devices sharing that network, the router guarding the edge, and the identity exposure that follows you around the internet.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRansomware Readiness Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAccount \u0026amp; Access Review\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCredential Hygiene Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTravel \u0026amp; Public Wi-Fi Check\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStartup \u0026amp; Persistence Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWi-Fi \u0026amp; Home Network Check\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eSmart Device Exposure Scan\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRouter \u0026amp; Wi-Fi Settings Checklist\u003c\/strong\u003e ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Footprint Report\u003c\/strong\u003e ($49)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $398. This scan: $149.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy it is priced this way\u003c\/h3\u003e\u003cp\u003eA one-time remote virus removal and repair from a high-street service costs about $150, fixes one machine and leaves you no record of anything. This costs the same, examines twelve surfaces, and gives you a written report you can act on for the rest of the year. That is not a discount for volume — it is what the comparison demands.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA score for every surface — computer, network, devices, identity — plus a combined household picture.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all twelve scans: how a leaked password, an exposed camera and an open router feature form one route in.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding seen by three scans appears once, marked confirmed, instead of three times.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan ordered by impact.\u003c\/li\u003e\n\u003cli\u003eA full appendix with the detail from every scan.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone who wants the complete picture in one purchase — a new home, a new setup, or the first proper look after years of adding things.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, on the machine and network you want checked\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eAbout 45 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWant to keep it that way?\u003c\/h3\u003e\u003cp\u003eThe \u003cstrong\u003eQuarterly Home Checkup\u003c\/strong\u003e re-checks your home every 90 days.\u003c\/p\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here exploits a weakness, changes a setting on your machine, or leaves anything running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913671307576,"sku":"FULL-HOME-40","price":149.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-FULL-HOME-40_da6ac9b1-e0de-4a56-93b0-6a42d3f565d2.png?v=1788709378"},{"product_id":"quickscan-full-service-business-security-scan","title":"General Business Hardening Bundle – 19 Scans, One Complete Report","description":"\u003cp\u003e\u003cstrong\u003eNineteen scans, one run, one report — the closest thing to a professional assessment that runs itself.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe General Business Hardening Bundle covers every surface a small business has: the computers and the accounts on them, the office network and its devices, the domain and everything it exposes to the internet, the cloud storage nobody has looked at since it was set up, and the identity exposure of the people who work there.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eEndpoint \u0026amp; accounts:\u003c\/strong\u003e Windows Security Health Check ($29), Ransomware Readiness Check ($39), Account \u0026amp; Access Review ($39), Credential Hygiene Check ($29), Out-of-Date Software Scan ($19), Startup \u0026amp; Persistence Check ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eNetwork:\u003c\/strong\u003e Wi-Fi \u0026amp; Home Network Check ($29), Smart Device Exposure Scan ($39), Router \u0026amp; Wi-Fi Settings Checklist ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAccess \u0026amp; governance:\u003c\/strong\u003e Insider Risk Self-Assessment ($39), Active Directory Health Check ($99)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInternet-facing:\u003c\/strong\u003e Internet Exposure Scan ($69), Website \u0026amp; Storefront Checkup ($69), Certificate \u0026amp; Encryption Check ($19), Email Spoofing \u0026amp; BEC Check ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCloud \u0026amp; identity:\u003c\/strong\u003e Cloud Storage Exposure Check ($49), Breach \u0026amp; Identity Exposure Check ($39), Digital Footprint Report ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOptional:\u003c\/strong\u003e Code \u0026amp; Secrets Scanner ($59) — runs only if you point it at a code repository you own\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $821. This scan: $499.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhat it replaces\u003c\/h3\u003e\u003cp\u003eAn IT provider charges $1,000–$2,000 for a basic automated vulnerability scan and $2,000–$4,000 for a standard assessment. Automated penetration-testing platforms start at $2,999 per test. This is a quarter to a half of the cheapest of those, with an attack-path narrative and a 90-day programme that none of them include at that price.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA score for every surface, plus a combined business risk picture.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across every scan — the report's most valuable section, showing how findings in different scans assemble into a complete intrusion path.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding confirmed by several scans is presented once and marked confirmed.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eAn executive summary written for an owner, a board, a client or an insurer.\u003c\/li\u003e\n\u003cli\u003eA 90-day security programme ordered by impact and effort.\u003c\/li\u003e\n\u003cli\u003eA full appendix with the detail from every scan.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses facing an insurance renewal, a client security questionnaire, or simply the realisation that nobody has ever looked. Also the right starting point before commissioning hands-on work — a report that surfaces a complete attack path is the best possible brief for the engineers who fix it.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain, public address and storage names — you must own them or be authorised to test them\u003c\/li\u003e\n\u003cli\u003eAbout an hour\u003c\/li\u003e\n\u003cli\u003eThe Active Directory check only produces results on a domain-joined machine; on a standalone PC it is reported as not applicable rather than as a pass\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWant to keep it that way?\u003c\/h3\u003e\u003cp\u003eThe \u003cstrong\u003eQuarterly Business Checkup\u003c\/strong\u003e re-checks your business every 90 days.\u003c\/p\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here logs in, submits an attack payload, exploits a weakness or changes a setting on your systems. It is not a penetration test, a certification, an audit or an attestation — if the report surfaces a complete critical attack path, it says so plainly and points you to ThreatVector's hands-on engagement.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52913671340344,"sku":"FULL-SMB-41","price":499.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-FULL-SMB-41_a104568e-5237-4f77-8137-0cbbd86c8994.png?v=1792162413"},{"product_id":"quickscan-business-impersonation-sweep","title":"Business Impersonation Sweep – Find Lookalike Domains Registered Against Your Brand","description":"\u003cp\u003e\u003cstrong\u003eSomeone can register a domain one letter away from yours this afternoon. This finds out whether they already have.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Business Impersonation Sweep generates the lookalike versions of your domain that a criminal would register — typos, swapped letters, look-alike characters, alternate endings — and checks which of them exist right now, which have a mail server behind them, and which are already hosting a site that echoes your brand. It reports signals, not accusations: a registered lookalike is only called a phishing set-up when it both resolves and shows a mail server or a copy of your content.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eCommon lookalike patterns of your domain: typos, look-alike characters, swapped letters and alternate endings\u003c\/li\u003e\n\u003cli\u003eWhich of those lookalikes are actually registered right now\u003c\/li\u003e\n\u003cli\u003eWhether a registered lookalike has a mail server — the classic set-up for phishing your customers and spoofing your staff\u003c\/li\u003e\n\u003cli\u003eWhether a lookalike hosts a live site that reuses your business name or page titles\u003c\/li\u003e\n\u003cli\u003eHow recently a lookalike was registered, because the new one is the urgent one\u003c\/li\u003e\n\u003cli\u003eNothing touches your own systems: the sweep only reads public DNS and registration records\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery registered lookalike rated Critical \/ High \/ Medium \/ Low by what it is set up to do, not merely by the fact that it exists.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to your registrar, your lawyer or your bank.\u003c\/li\u003e\n\u003cli\u003eStep-by-step guidance: which lookalikes to report, which to register defensively, and what to warn customers and staff about.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAny business whose customers pay invoices or log in by email, and any brand that has ever been spoofed. Brand-protection services sell this as a monitoring subscription; this is one run and a report you own.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain name and, optionally, your business or brand name\u003c\/li\u003e\n\u003cli\u003eAbout 4 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to check the domain you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It looks up public DNS and registration records; it never visits a suspicious site with anything but an ordinary page request, never contacts the people behind a lookalike, never files a takedown for you, and changes nothing. A lookalike that is merely registered is reported as informational, not as an attack. It is not a certification, an audit or an attestation. If the report shows a live impersonation, it says so plainly and points you to the hands-on ThreatVector service that deals with it.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916758610232,"sku":"IMPERSON-19","price":49.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-IMPERSON-19.png?v=1788725417"},{"product_id":"quickscan-api-web-endpoint-security-scan","title":"API \u0026 Web-Endpoint Security Scan – Find Exposed APIs, Documentation and Keys","description":"\u003cp\u003e\u003cstrong\u003eYour website's own JavaScript tells a stranger where your API lives. This scan reads it the way they would.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe API \u0026amp; Web-Endpoint Security Scan starts where an attacker starts: the pages and scripts your site serves. It extracts the API addresses they call, then makes ordinary read-only requests to see what answers without a login, whether your API documentation or GraphQL schema is public, and whether a secret key is sitting in your front-end code. Nothing is submitted, injected, fuzzed or logged in to.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eThe API endpoints your site's pages and scripts call, discovered from the served HTML and JavaScript\u003c\/li\u003e\n\u003cli\u003ePublic API documentation and GraphQL introspection that hand a stranger a complete map of your API\u003c\/li\u003e\n\u003cli\u003eAPI keys and tokens left in front-end JavaScript — a secret key there is rated Critical; a publishable key is noted, not flagged\u003c\/li\u003e\n\u003cli\u003eEndpoints that return data with no login at all, judged by what comes back rather than by guesswork\u003c\/li\u003e\n\u003cli\u003eCORS settings that let any website read your API from a visitor's browser\u003c\/li\u003e\n\u003cli\u003eTransport hygiene on the API itself: encryption, certificate, security headers and rate-limit signals\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the endpoint and the evidence named.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to your developer, your agency or a customer's security questionnaire.\u003c\/li\u003e\n\u003cli\u003eRemediation ordered by what an attacker would reach for first, mapped to the OWASP API Security Top 10.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAnyone running a web app, an online service or a public API — especially a business that had one built for them and has never seen it from the outside. Application security scanners are priced per month and per developer; this is one run and a written report.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe address of the website or API to check\u003c\/li\u003e\n\u003cli\u003eAbout 3 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to test the address you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It makes read-only requests; it never submits a form, never injects a payload, never guesses a credential, never logs in, and leaves nothing behind. If a firewall blocks the checks, the report says so rather than reporting a clean result. It is not a penetration test, a certification, an audit or an attestation — if the report shows a serious exposure, it points you to ThreatVector's hands-on Internet Exposure Security Scan.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779123000,"sku":"API-60","price":69.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-API-60.png?v=1788725721"},{"product_id":"quickscan-domain-dns-security-check","title":"Domain \u0026 DNS Security Check – Hijack, Expiry and Subdomain Takeover Risks","description":"\u003cp\u003e\u003cstrong\u003eLosing your domain is the one breach you cannot restore from backup.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Domain \u0026amp; DNS Security Check looks at the records that protect the domain itself rather than the website on it: whether the registrar will refuse a transfer request, how soon the registration expires, whether DNSSEC and CAA are in place, and — the finding that matters most — whether any subdomain still points at a cloud service you gave up, which is how a stranger takes over a corner of your name without touching your systems. Up to three domains in one run.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eRegistrar transfer lock and how soon the domain expires — both precursors to a domain hijack\u003c\/li\u003e\n\u003cli\u003eDNSSEC, CAA and nameserver health: the records that protect the domain itself\u003c\/li\u003e\n\u003cli\u003eSubdomain takeover: a subdomain pointing at a cloud service that no longer belongs to you, confirmed by two independent signals before it is reported\u003c\/li\u003e\n\u003cli\u003eMail-security records (SPF, DKIM, DMARC, MTA-STS) that stop strangers sending as you\u003c\/li\u003e\n\u003cli\u003eWhether your entire DNS zone can be copied by anyone who asks (zone transfer)\u003c\/li\u003e\n\u003cli\u003ePassive throughout: public registration data and DNS only, nothing sent to your servers\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the record and the evidence named.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can forward to whoever manages your domain.\u003c\/li\u003e\n\u003cli\u003eStep-by-step remediation for each record, written for the registrar and DNS control panels a small business actually uses.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAny domain owner. Small businesses lose domains to expiry and subdomain takeover far more often than they lose them to hackers, and nothing else in a typical security stack checks for either.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eUp to three domain names\u003c\/li\u003e\n\u003cli\u003eAbout 3 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to check the domains you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads public registration and DNS data; it never changes a record, never contacts your registrar, and never exploits a dangling subdomain to prove the point. If a registry does not publish lock or expiry data, the report says the check could not run rather than reporting it as safe. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779155768,"sku":"DNS-63","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-DNS-63.png?v=1788725722"},{"product_id":"quickscan-dependency-supply-chain-scan","title":"Dependency \u0026 Supply-Chain Scan – Known-Vulnerable Packages in the Code You Ship","description":"\u003cp\u003e\u003cstrong\u003eMost of the code in your product was written by strangers. This checks which of it has a known hole.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Dependency \u0026amp; Supply-Chain Scan reads the dependency and lock files in a code folder you own — npm, Python, Go, Ruby, PHP, Java, Rust and .NET — and checks every package and version against the free, public OSV vulnerability database. It leads with the vulnerabilities that already have a fix you can install today, separates the packages you chose from the ones they dragged in, and never installs, runs or uploads any of your code.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eEvery dependency and lock file in the folder, across eight package ecosystems\u003c\/li\u003e\n\u003cli\u003eEach package and version against the OSV public vulnerability database\u003c\/li\u003e\n\u003cli\u003eWhether a fix exists, and whether the vulnerable package is one you chose or one that came along with it\u003c\/li\u003e\n\u003cli\u003eMissing lock files and unpinned versions that make every build a different build\u003c\/li\u003e\n\u003cli\u003eAbandoned packages, and names that impersonate popular ones\u003c\/li\u003e\n\u003cli\u003eLicence signals that a buyer or a customer's lawyer would ask about, reported as information only\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery vulnerable package rated Critical \/ High \/ Medium \/ Low, with the version that fixes it where one exists.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to a client, an insurer or an acquirer asking about your software supply chain.\u003c\/li\u003e\n\u003cli\u003eUpgrade-first remediation: what to bump, in what order, and what cannot be fixed yet.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSolo developers, small product teams, and business owners who had an application built for them and want to know what it depends on. Subscription scanners charge per developer per month; this is one run and a written report.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection, for the vulnerability database lookups\u003c\/li\u003e\n\u003cli\u003eA local folder containing a project you own or are authorised to scan\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes, longer for a large monorepo\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads your dependency files; it never uploads your source code, never installs or runs a package, never tests whether a vulnerability is exploitable, and changes nothing in your project. If the vulnerability database cannot be reached, the report says the check did not run rather than reporting a clean result. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779188536,"sku":"DEP-68","price":79.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-DEP-68.png?v=1788725722"},{"product_id":"quickscan-source-control-cicd-hygiene-check","title":"Source Control \u0026 CI\/CD Hygiene Check – Build Pipeline Takeover Risks","description":"\u003cp\u003e\u003cstrong\u003eIf a stranger's pull request can run with your secrets, they do not need to hack you. They just need to open one.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Source Control \u0026amp; CI\/CD Hygiene Check reads the build-pipeline files in a repository you own — GitHub Actions, GitLab CI, Azure Pipelines, Jenkins, CircleCI — for the patterns that let someone else run code in your build: workflows that execute untrusted pull requests with secrets available, steps pinned to a moving tag, secrets passed into shell commands, and curl-piped-to-shell installs. Then it checks the repository itself: committed credential files, tokens embedded in remote URLs, and whether commits are signed.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eBuild-pipeline files for GitHub Actions, GitLab CI, Azure Pipelines, Jenkins and CircleCI, read from your folder\u003c\/li\u003e\n\u003cli\u003eDangerous trigger and permission combinations — above all, running a stranger's pull request with your secrets\u003c\/li\u003e\n\u003cli\u003eBuild steps pinned to a moving tag instead of a fixed version, and secrets handed to untrusted steps\u003c\/li\u003e\n\u003cli\u003eShell installs that download and run whatever a URL serves that day\u003c\/li\u003e\n\u003cli\u003eLocal git hygiene: committed credential files, remote URLs with embedded tokens, commit signing\u003c\/li\u003e\n\u003cli\u003eOptionally, the public information about your repository on GitHub — and it says plainly what it cannot verify without an access token\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with the workflow file and the line identified.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to a client, an insurer or an acquirer asking how your software is built.\u003c\/li\u003e\n\u003cli\u003eFix-first remediation: which workflow to change today, and which settings only you can confirm in your hosting provider's console.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSolo developers, small development shops, and any business that ships software from a hosted repository and has never had its pipeline looked at. It never asks for an access token — what it cannot see without one, it tells you.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eA local checkout of a repository you own or are authorised to scan\u003c\/li\u003e\n\u003cli\u003eAn internet connection only if you opt in to the public GitHub lookup\u003c\/li\u003e\n\u003cli\u003eAbout 3 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads pipeline and git files; it never uploads your source code, never runs a workflow, never uses or requests an access token, and changes nothing in your repository. Branch-protection settings live in your hosting provider's console, so the report lists them as unverified rather than guessing. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779221304,"sku":"CICD-69","price":69.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-CICD-69.png?v=1788725723"},{"product_id":"quickscan-ai-usage-shadow-ai-exposure-audit","title":"AI Usage \u0026 Shadow-AI Exposure Review – Find the AI Tools Your Business Actually Uses","description":"\u003cp\u003e\u003cstrong\u003eYour staff are using more AI tools than your policy covers. This measures the gap.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe AI Usage \u0026amp; Shadow-AI Exposure Review finds the AI actually in use on a computer — installed AI applications, browser extensions that can read every page, AI service keys left in files, model servers running locally and, only if you opt in, a count of visits to AI websites — then sets what it measured against six questions about your rules for AI. Measured usage and self-reported governance are scored separately and never blurred together. Nothing leaves the machine while it runs: the only connections it opens are to the computer itself.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eAI applications installed for this account, and AI browser extensions — including which ones can read every page you open\u003c\/li\u003e\n\u003cli\u003eAI service keys (OpenAI, Anthropic, Google AI and others) left in code, configuration and shell files\u003c\/li\u003e\n\u003cli\u003eAI model software running locally, and whether it is reachable from your network\u003c\/li\u003e\n\u003cli\u003eExported chat transcripts, prompt libraries and training data sitting in files; optionally, a count of visits to AI sites — a count only, never a page title or address\u003c\/li\u003e\n\u003cli\u003eSix governance questions: policy, customer data in AI tools, vendor review, code review, approval and inventory\u003c\/li\u003e\n\u003cli\u003eEvery measurement is for this user account and this computer, and the report says so\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with measured findings and self-reported answers kept separate.\u003c\/li\u003e\n\u003cli\u003eThe headline your policy needs: how many AI tools are in use, and how many of them the policy covers.\u003c\/li\u003e\n\u003cli\u003eAn executive summary mapped to the NIST AI Risk Management Framework, with OWASP LLM Top 10 and ISO\/IEC 42001 clause references alongside, that you can hand to a client, an insurer or your board.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusiness owners and managers who suspect AI is being used with customer data and want a measured answer before writing a policy — or before a client asks. There is no other way for a small business to get this without an enterprise platform or a consultant.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed — it checks this user account's AI usage, not the whole machine\u003c\/li\u003e\n\u003cli\u003eNo internet connection needed for the checks; only to send the report\u003c\/li\u003e\n\u003cli\u003eOptionally, a folder of your own code or documents to include\u003c\/li\u003e\n\u003cli\u003eAbout 6 minutes, including the six questions\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It never reads the content of a conversation, a prompt or a page; the optional browser-history check counts visits and records nothing else. It never contacts an AI service, never uses a key it finds, and changes nothing. Mapping to a framework is not an audit against it: the report is not a certification, an audit or an attestation of ISO\/IEC 42001 or anything else.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779254072,"sku":"AIUSE-70","price":89.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-AIUSE-70.png?v=1788725781"},{"product_id":"quickscan-deployed-ai-feature-security-test","title":"Deployed AI Feature Security Test – What Your Chatbot Tells a Stranger Who Asks","description":"\u003cp\u003e\u003cstrong\u003eYou put an AI feature on your website. Has anyone asked it what its instructions are?\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Deployed AI Feature Security Test sends a small, fixed set of ordinary questions to an AI feature you own — a support chatbot, an AI search box or an AI-backed API endpoint — and reports what the answers give away: whether it will describe the instructions it was given, which model and provider it names, whether it can be used without signing in, whether anything it is told in one conversation reappears in another, and whether its error messages expose stack traces or file paths. At most twelve requests, every one of them listed in the report.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhether the AI will describe the instructions it was given — system prompt leakage (OWASP LLM07)\u003c\/li\u003e\n\u003cli\u003eWhether it can be used without signing in, and what usage information it returns (LLM10)\u003c\/li\u003e\n\u003cli\u003eWhich model and provider it discloses, in its answers and in its response headers\u003c\/li\u003e\n\u003cli\u003eWhether a reference planted in one conversation reappears in a fresh one (LLM02)\u003c\/li\u003e\n\u003cli\u003eWhether error responses expose stack traces, file paths or provider identifiers\u003c\/li\u003e\n\u003cli\u003eThe endpoint itself: encryption, certificate, CORS and rate-limit signals\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, mapped to the OWASP Top 10 for LLM Applications.\u003c\/li\u003e\n\u003cli\u003eThe exact questions asked and the answers received, so your developer can reproduce every finding.\u003c\/li\u003e\n\u003cli\u003eAn executive summary written for the customer security questionnaire that probably prompted the purchase.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eAny business that has shipped a chatbot, an AI assistant or an AI-backed API and has been asked — by a customer, an insurer or their own conscience — whether it is safe. The alternative is an AI red-team engagement at four figures, or nothing.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe full address of the AI feature, and you type its hostname a second time to confirm it is yours\u003c\/li\u003e\n\u003cli\u003eAbout 3 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to test the AI feature you enter — the test refuses AI provider addresses and anything that is not yours to test\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It sends a fixed set of plain questions, never a jailbreak, an exploit or an attempt to extract other people's data; it stops at the first sign of a leak instead of pulling on the thread; and it is hard-limited to twelve requests. It never contacts any third party, only the endpoint you name. It is not a red-team exercise, a certification, an audit or an attestation — if the report shows a serious leak, it points you to ThreatVector's hands-on services.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779286840,"sku":"AISEC-71","price":149.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-AISEC-71.png?v=1788725782"},{"product_id":"quickscan-travel-connection-device-safety-test","title":"Travel Connection \u0026 Device Safety Test – Is the Network You Are On Right Now Safe?","description":"\u003cp\u003e\u003cstrong\u003eThe hotel Wi-Fi says you are connected. This says whether your VPN is actually carrying your traffic.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Travel Connection \u0026amp; Device Safety Test is run on the network you are sitting on right now. It measures whether a VPN is really carrying your traffic and whether your DNS requests are leaking outside it, where your traffic comes out and in which country, whether the network is holding you at a sign-in page, and whether anyone on it is opening your encrypted connections. Then it checks the laptop itself — file sharing, firewall, disk encryption, screen lock, Bluetooth and the current Wi-Fi — and asks eight questions about how you have set yourself up for this trip.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWhether a VPN is really carrying your traffic, and whether your DNS is leaking outside it\u003c\/li\u003e\n\u003cli\u003eWhere your traffic comes out, and whether this network holds you at a sign-in page\u003c\/li\u003e\n\u003cli\u003eWhether anyone is opening and reading your encrypted connections on this network\u003c\/li\u003e\n\u003cli\u003eFile sharing, firewall, disk encryption, screen lock, Bluetooth and the current Wi-Fi on this laptop\u003c\/li\u003e\n\u003cli\u003eEight questions about how you travel: what crosses a border on this device, whether you carry a clean laptop, how you charge\u003c\/li\u003e\n\u003cli\u003eNothing is intercepted or recorded; your public address is shown to you and only a shortened form is kept\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with measured results and your own answers kept separate.\u003c\/li\u003e\n\u003cli\u003eA pre-departure verdict: safe to work from here, or not, and what to change first.\u003c\/li\u003e\n\u003cli\u003eStep-by-step remediation you can do from a hotel room, in the order that matters.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eExecutives, consultants, sales staff and anyone who works from airports and hotels with a laptop that holds a customer list. Run it before you leave, and again from the road.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eAdministrator rights recommended, not required — the report names anything it could not check without them\u003c\/li\u003e\n\u003cli\u003eAn internet connection: the one you want to test\u003c\/li\u003e\n\u003cli\u003eAbout 2 minutes, plus the eight questions\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It makes a handful of small test connections of its own; it never intercepts, records or alters your traffic, never changes a network or device setting, and leaves nothing running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779319608,"sku":"TRAVEL-72","price":39.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-TRAVEL-72.png?v=1788725782"},{"product_id":"quickscan-hardware-firmware-audit","title":"Hardware \u0026 Firmware Check – Secure Boot, Encryption, Disk Health and USB History","description":"\u003cp\u003e\u003cstrong\u003eNobody wrote down what this computer is. This is the first row of the asset register you do not have.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Hardware \u0026amp; Firmware Check reads the physical layer of a Windows computer: make, model, serial number and asset tag, how old the firmware is, whether Secure Boot and the TPM security chip are on, whether the drive is encrypted and whether its recovery key is stored somewhere you could actually find, how healthy the disk is, whether the hardware can still run a supported version of Windows — and the record Windows keeps of every USB storage device ever plugged in. Then it asks seven questions about how equipment is tracked, returned and disposed of.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eMake, model, serial number, asset tag and firmware age of this machine\u003c\/li\u003e\n\u003cli\u003eSecure Boot, the TPM security chip, Kernel DMA Protection and disk encryption\u003c\/li\u003e\n\u003cli\u003eDisk health, recovery-key backup, and whether this hardware can run a supported Windows\u003c\/li\u003e\n\u003cli\u003eThe record Windows keeps of every USB storage device attached to it\u003c\/li\u003e\n\u003cli\u003eSeven questions about equipment disposal, asset records, returned kit and recovery keys\u003c\/li\u003e\n\u003cli\u003eEverything is measured locally; the check works fully offline\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with measured results and your own answers kept separate.\u003c\/li\u003e\n\u003cli\u003eA hardware identity block you can paste straight into an asset register or an insurance application.\u003c\/li\u003e\n\u003cli\u003eRemediation mapped to NIST CSF 2.0 asset management, with NIST SP 800-88 cited wherever disposal comes up.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSmall businesses that have never had an asset register, owners answering a cyber-insurance questionnaire that asks about encryption and disposal, and anyone about to retire, sell or hand down a computer.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator — without it, more than half of the check cannot run, and the report says so rather than guessing\u003c\/li\u003e\n\u003cli\u003eNo internet connection needed for the checks; only to send the report\u003c\/li\u003e\n\u003cli\u003eAbout 2 minutes, plus the seven questions\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads hardware, firmware and Windows records; it never changes a firmware, encryption or device setting, never reads the contents of any drive or USB device, and leaves nothing running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916779352376,"sku":"ASSET-73","price":49.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-ASSET-73.png?v=1788725782"},{"product_id":"quickscan-digital-asset-register-ownership-audit","title":"Digital Asset Register \u0026 Ownership Check – Who Owns Your Domains, and What Transfers If You Sell","description":"\u003cp\u003e\u003cstrong\u003eIf the person who registered your domain left the company, do you still own it?\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Digital Asset Register \u0026amp; Ownership Check builds the document most small businesses do not have: what the business owns online, who the public record says controls it, when it expires, and which suppliers everything depends on. It reads the registration records for up to three domains, every certificate issued for your names in the public transparency logs, the subdomains and the services behind them, whether your business controls its own social handles and app-store listings, and who runs your DNS, email, website and certificates. Then it asks eight questions about who holds the logins.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eDomain expiry and transfer lock, and who the registration record says owns each domain\u003c\/li\u003e\n\u003cli\u003eEvery certificate issued for your names in the public logs, and which are expiring\u003c\/li\u003e\n\u003cli\u003eThe supplier dependency map: who runs your DNS, email, website and certificates\u003c\/li\u003e\n\u003cli\u003eRetired and dangling names, handle ownership across platforms, and Apple App Store presence\u003c\/li\u003e\n\u003cli\u003eEight questions about who holds the registrar login, and who owns your code and cloud accounts\u003c\/li\u003e\n\u003cli\u003ePublic records only: one ordinary visit to your own homepage, and nothing else touches your systems\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, with measured results and your own answers kept separate.\u003c\/li\u003e\n\u003cli\u003eA digital asset register you keep: domains, certificates, subdomains, handles and suppliers in one table.\u003c\/li\u003e\n\u003cli\u003eRemediation ordered by what would hurt most: the domain that expires next, the login one person holds.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eOwners preparing to sell, buy or insure a business, anyone whose domain was set up by a developer or an ex-employee, and every business that has never written down what it owns online. A vulnerability report is stale in a month; this is the document you keep.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eUp to three domain names, your business name, and optionally a handle and website address\u003c\/li\u003e\n\u003cli\u003eAbout 4 minutes for one domain, up to 7 for three\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to check the domains you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It reads public registration, DNS and certificate records; it never logs in to a registrar, never changes a record, and never tests whether a dangling name can be taken over. It is not a legal opinion on ownership, a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916789379384,"sku":"REGISTER-74","price":79.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-REGISTER-74.png?v=1788725850"},{"product_id":"quickscan-organizational-breach-exposure-history","title":"Organizational Breach \u0026 Exposure History – The Public Record on Another Company, Before You Sign","description":"\u003cp\u003e\u003cstrong\u003eBefore you give a supplier access, buy a company or sign a contract: what does the public record already say about them?\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Organizational Breach \u0026amp; Exposure History assembles what the public record shows about one organisation you name — the data breaches it has been named in, what its published email and DNS settings say about how it is run, its certificate history and the suppliers behind its names, lookalike domains registered against it, public code repositories under its name, whether it publishes a security contact, and whether it appears in public criminal leak listings. It does not scan them. It visits their website at most three times, as an ordinary browser would, and everything it reports carries its source and the date it was retrieved.\u003c\/p\u003e\u003ch3\u003eWhat it checks\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003ePublic breaches naming this organisation, corroborated across more than one index before they are reported\u003c\/li\u003e\n\u003cli\u003eWhat their published email and DNS settings say about how the organisation is run\u003c\/li\u003e\n\u003cli\u003eTheir certificate history and the suppliers behind their names\u003c\/li\u003e\n\u003cli\u003eLookalike domains registered against them, and which of those can send email\u003c\/li\u003e\n\u003cli\u003eWhether they publish a security contact, and public leak listings that name them\u003c\/li\u003e\n\u003cli\u003ePublic code repositories under their name, and the history of their web presence\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eA written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eEvery finding rated Critical \/ High \/ Medium \/ Low, each with its source and retrieval date, and any Critical finding held for human review before it is sent.\u003c\/li\u003e\n\u003cli\u003eA red-flag summary ordered by what would change a price, a warranty or a decision.\u003c\/li\u003e\n\u003cli\u003eThe question each red flag should make you ask them, which is what a screen like this is actually for.\u003c\/li\u003e\n\u003cli\u003eA \"what was checked\" appendix that states the limits of the scan honestly.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBuyers, brokers, advisors and anyone onboarding a supplier who wants access to their systems. It is a screening tool: it tells you whether to commission a full engagement and what to ask in it.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe organisation's legal name and its main domain, typed twice\u003c\/li\u003e\n\u003cli\u003eAbout 5 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or control the organisation, or hold written authorisation or a signed engagement covering it — you state which, it is recorded on the report, and there is no third option\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. This product never scans, probes, tests or logs in to the organisation you name; it reads public records and makes at most three ordinary page requests to their website. It does not assess that organisation's security and cannot tell you whether their internal controls are sound. It is not cyber due diligence and is not a substitute for it. It is not a certification, an audit or an attestation. The report describes what the public record shows, as at the date it was retrieved, from the sources it names — nothing more.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916789477688,"sku":"ORGHIST-75","price":149.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-ORGHIST-75.png?v=1788725851"},{"product_id":"quickscan-professional-travel-security-scan","title":"Professional Travel Security Scan – 7 Scans Before You Fly, One Report","description":"\u003cp\u003e\u003cstrong\u003eRun it the week before you fly. Seven scans, one verdict: is this laptop safe to travel with?\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Professional Travel Security Scan checks the laptop you are taking, the connection it is on, and the habits that decide whether a trip costs you a customer list — whether a VPN is really carrying your traffic and your DNS is not leaking, whether the network is intercepting you, disk encryption and saved passwords on a device that is about to leave the building, out-of-date software and silent startup entries, and the credentials already circulating before you log in from a hotel.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eTravel Connection \u0026amp; Device Safety Test\u003c\/strong\u003e — is the VPN carrying your traffic, DNS leak, interception, sharing on this network ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eTravel \u0026amp; Public Wi-Fi Check\u003c\/strong\u003e — saved networks that auto-join, sharing and firewall profile ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e — antivirus, firewall, updates, disk encryption ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCredential Hygiene Check\u003c\/strong\u003e — saved logins, password age, saved remote-desktop credentials ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e — software that no longer receives security updates ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStartup \u0026amp; Persistence Check\u003c\/strong\u003e — everything set to start by itself ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBreach \u0026amp; Identity Exposure Check\u003c\/strong\u003e — credentials already circulating in public breach data ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $213. This scan: $149.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the scan beats seven separate scans\u003c\/h3\u003e\u003cp\u003eAll seven look at the same laptop and the same trip from different angles, so they corroborate each other. A saved remote-desktop login, a leaked password for the same account and a VPN that is not actually carrying traffic are not three medium findings — they are one route from a hotel network to your customer list, and the report draws that chain only where its links are actually present. The report format matters more than usual here: it is read before a trip, so the action plan is a short pre-departure checklist rather than a 90-day plan.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA pre-departure readiness verdict and a per-surface score: device, connection, identity.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis — open network to no VPN to DNS leak to credential capture to account takeover — drawn only where the links exist.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding seen by three scans appears once, marked confirmed, instead of three times.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eA pre-trip checklist mapped to NIST CSF 2.0, sized to what you can finish before you leave.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eTravelling executives, consultants and sales staff — anyone who carries the business on a laptop and works from airports, hotels and client sites.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, on the laptop you are taking\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection — ideally the one you want tested\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes, including a short set of questions about the trip\u003c\/li\u003e\n\u003cli\u003eThe email addresses and domain you want checked for breaches must be yours\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing in this scan intercepts or records your traffic, exploits a weakness, changes a setting on your machine, or leaves anything running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916789510456,"sku":"PRO-TRAVEL-54","price":149.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PRO-TRAVEL-54.png?v=1788725851"},{"product_id":"quickscan-app-development-security-scan","title":"App Development Security Scan – 5 Scans of the Code You Ship, One Report","description":"\u003cp\u003e\u003cstrong\u003eThe security of the code you ship, and everything it depends on — in one run.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe App Development Security Scan is built for a solo developer or a small dev shop. It reads a code project on this computer and asks the OSV vulnerability database which of your dependencies have known holes, leading with the ones that have a fix you can install today. It reads your build pipeline for the patterns that let a stranger's pull request run with your secrets. It searches your working tree and your git history for credentials, checks the certificate on your site, and looks for publicly listable cloud buckets. No secret is ever written into the report — only a masked fragment.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eDependency \u0026amp; Supply-Chain Vulnerability Scan\u003c\/strong\u003e — known-vulnerable packages, checked against OSV.dev ($79)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eSource Control \u0026amp; CI\/CD Hygiene Check\u003c\/strong\u003e — pipeline takeover patterns, unpinned actions, git hygiene ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCode \u0026amp; Secrets Scanner\u003c\/strong\u003e — credentials in your working tree and git history ($59)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate \u0026amp; Encryption Check\u003c\/strong\u003e — expiry, issuer, protocol and cipher strength ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCloud Storage Exposure Check\u003c\/strong\u003e — publicly listable or readable buckets ($49)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $275. This scan: $199.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the scan beats five separate scans\u003c\/h3\u003e\u003cp\u003eThe chain this scan hunts for is specific: a key leaked into git history that is still live, that still opens the bucket your pipeline deploys to, from a workflow a stranger can trigger. Each of the five scans sees one link; only the combined report sees the chain. Findings are mapped to OWASP ASVS, with NIST SSDF as the alternate framing, so you have something to show a client's security questionnaire. The Linux Server Hardening Check is the recommended companion for anyone running their own server and is sold separately, because it cannot run from a Windows package.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA per-surface score — dependencies, pipeline, secrets, transport, storage — and a combined picture of the code you ship.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis showing how the findings combine into one route in.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding seen by three scans appears once, marked confirmed, instead of three times.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eA 90-day remediation plan ordered by what an attacker reaches for first.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to a client, an insurer or an acquirer.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eSolo developers, small product teams, agencies that ship code for clients, and business owners who had an application built for them and want to know what they now own.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eA local checkout of the project, and your domain name\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to scan the code, domain and storage you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing in this scan uploads your source code, installs or runs a package, executes a workflow, tests whether a credential works, or changes anything in your repository. Mapping to a framework is not an audit against it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916789608760,"sku":"PRO-APPDEV-55","price":199.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PRO-APPDEV-55.png?v=1788725852"},{"product_id":"quickscan-api-and-backend-process-scan","title":"API and Backend Process Scan – 6 Scans of Your API From the Outside, One Report","description":"\u003cp\u003e\u003cstrong\u003eYour API and its backend, seen the way a stranger sees them.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe API and Backend Process Scan is for anyone running a web app, a SaaS product or a public API. It discovers the API addresses your own front-end calls, then makes ordinary read-only requests to see which answer without a login, whether your API documentation or GraphQL schema is public, and whether a secret key is sitting in your front-end code. It checks which ports answer on your server and what is really behind them, the certificate, your DNS and domain security — registrar lock, expiry and subdomain takeover — and whether any storage bucket is publicly listable.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eAPI \u0026amp; Web-Endpoint Security Scan\u003c\/strong\u003e — endpoints your front-end calls, exposed docs, keys in JavaScript, unauthenticated data ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInternet Exposure Scan\u003c\/strong\u003e — open ports, exposed remote access, service banners ($69)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate \u0026amp; Encryption Check\u003c\/strong\u003e — expiry, issuer, protocol and cipher strength ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDomain \u0026amp; DNS Security Check\u003c\/strong\u003e — registrar lock, expiry, DNSSEC, subdomain takeover ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCode \u0026amp; Secrets Scanner\u003c\/strong\u003e — credentials in your working tree and git history ($59)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCloud Storage Exposure Check\u003c\/strong\u003e — publicly listable or readable buckets ($49)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $304. This scan: $229.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the scan beats six separate scans\u003c\/h3\u003e\u003cp\u003eThe chain this scan hunts for is an undocumented endpoint found in your JavaScript that answers without authentication and returns customer data — together with the exposed port, the weak certificate or the dangling subdomain that turns it from a finding into an incident. Each scan sees one link; the combined report describes the route. Findings are mapped to the OWASP API Security Top 10. Nothing is submitted, injected, fuzzed or exploited, and no login is attempted. The Linux Server Hardening Check is the recommended companion for anyone running their own server and is sold separately, because it cannot run from a Windows package.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA per-surface score — API, perimeter, transport, domain, code, storage — and a combined external picture.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis showing how the exposures combine into one route in.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding seen by three scans appears once, marked confirmed, instead of three times.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eA 90-day remediation plan ordered by what an attacker reaches for first.\u003c\/li\u003e\n\u003cli\u003eAn executive summary written for a customer's security questionnaire.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eFounders and small teams running a web application or API, and businesses that had one built for them and have never seen it from the outside.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe address of the website or API, your domain, and optionally a local copy of the code\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes\u003c\/li\u003e\n\u003cli\u003eYou must own or be authorised to test everything you enter\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing in this scan logs in, submits a form, injects a payload, guesses a credential or exploits a weakness; it checks whether things answer and what they reveal. If a firewall blocks the checks, the report says so instead of reporting a clean result. It is not a penetration test, a certification, an audit or an attestation — if it surfaces something serious, it points you to ThreatVector's hands-on Internet Exposure Security Scan.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916809892152,"sku":"PRO-API-56","price":229.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PRO-API-56.png?v=1788725929"},{"product_id":"quickscan-ai-business-implementation-audit","title":"AI Business Implementation Review – 4 Scans of the AI Actually in Use, One Report","description":"\u003cp\u003e\u003cstrong\u003eMost businesses have more AI in them than they think, and none of it on a list.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe AI Business Implementation Review finds the AI tools actually in use, the AI service keys sitting in your files and git history, the locally running model servers and — if you opt in — how often AI sites are used, then sets that against six questions about your rules for AI. It adds the access and offboarding questions that decide whether an AI tool inherits everything when someone leaves, and what is publicly known about the business that an AI-enabled attacker would use first.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eAI Usage \u0026amp; Shadow-AI Exposure Review\u003c\/strong\u003e — AI apps, extensions, keys and local model servers, plus six governance questions ($89)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCode \u0026amp; Secrets Scanner\u003c\/strong\u003e — AI service keys and other credentials in files and git history ($59)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInsider Risk Self-Assessment\u003c\/strong\u003e — the access, offboarding and control questions insurers ask ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Footprint Report\u003c\/strong\u003e — what the public record shows about the business and its people ($49)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $236. This review: $179.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the review beats four separate scans\u003c\/h3\u003e\u003cp\u003eThe headline is the gap: staff are using this many AI tools; your policy covers this many of them. Measured usage and self-reported governance are scored separately and never blurred together, and the whole report is mapped to the NIST AI Risk Management Framework, with OWASP LLM Top 10 and ISO\/IEC 42001 clause numbers alongside — so you have something to show a client, an insurer or a board that asks what your AI position is.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eSeparate scores for measured AI exposure, self-reported governance, access and offboarding, and public footprint.\u003c\/li\u003e\n\u003cli\u003eThe tool-versus-policy gap on page one.\u003c\/li\u003e\n\u003cli\u003eCross-scan corroboration, so a finding seen by more than one scan appears once, marked confirmed.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eA 90-day plan: the policy to write, the keys to rotate, the tools to approve or retire.\u003c\/li\u003e\n\u003cli\u003eAn executive summary mapped to the NIST AI Risk Management Framework.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eOwners and managers of businesses where AI arrived before a policy did — and anyone who has been asked by a customer or an insurer whether AI is used with their data.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eRun as administrator (one of the four scans needs it)\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain, website and business name; optionally a folder of your own code or documents\u003c\/li\u003e\n\u003cli\u003eAbout 20 minutes, including the questions\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. It never reads the content of a conversation, a prompt or a page; the optional browser-history check counts visits and records nothing else. It never contacts an AI service and never uses a key it finds. Mapping to a framework is not an audit against it: this is not an ISO\/IEC 42001 audit, a certification or an attestation of anything.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916809924920,"sku":"PRO-AI-57","price":179.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PRO-AI-57.png?v=1788725930"},{"product_id":"quickscan-business-acquisition-security-scan","title":"Business Acquisition Security Scan – A Pre-LOI Red-Flag Screen From Public Records","description":"\u003cp\u003e\u003cstrong\u003eThe public record on a business you are about to buy from, sell to, connect to or acquire — before you sign.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Business Acquisition Security Scan is a pre-LOI red-flag screen assembled from public records only. It reads the breach indexes, the certificate history, the published email and DNS settings, the lookalike domains registered against their name, the public code repositories and criminal leak listings, and who actually controls the domain you would be buying. It visits their website only as an ordinary browser would, a handful of times, and never scans, probes or tests their systems. It is authorisation-gated: you name the target, type its domain twice, and state your basis — and that is printed on the report.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eOrganizational Breach \u0026amp; Exposure History\u003c\/strong\u003e — public breach indexes, leak listings, certificate and repository history ($149)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Asset Register \u0026amp; Ownership Check\u003c\/strong\u003e — who controls the domains, expiry, transfer lock, supplier map ($79)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDomain \u0026amp; DNS Security Check\u003c\/strong\u003e — registrar lock, DNSSEC, dangling subdomains ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBusiness Impersonation \u0026amp; Typosquat Sweep\u003c\/strong\u003e — lookalike domains already registered against them, and which can send mail ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eEmail Spoofing \u0026amp; BEC Check\u003c\/strong\u003e — SPF, DKIM and DMARC, the best free proxy for operational maturity ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eCertificate \u0026amp; Encryption Check\u003c\/strong\u003e — certificate hygiene, another maturity signal ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Footprint Report\u003c\/strong\u003e — the public footprint of the business and its principals ($49)\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhy it is priced this way\u003c\/h3\u003e\u003cp\u003eThe seven scans inside cost $423 bought separately, and this scan costs more than that on purpose. What you are paying for is not the lookups. It is one deliberate authorisation step recorded on the cover; one target per run, never a batch; every finding carrying its source and retrieval date; any Critical finding held for human review before it is sent; and a red-flag summary ordered by what would change a price or a warranty — a domain about to expire or not transfer-locked, a domain registered to a departed individual, breach history, no DMARC enforcement, live lookalike domains, secrets in public repositories — each paired with the question it should make you ask. Your alternative is an hour of an advisor's time or a third-party risk platform, not a free scanner.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA red-flag summary ordered by what would change a price, a warranty or a decision.\u003c\/li\u003e\n\u003cli\u003eThe question each red flag should generate, which is the thing a screen like this is actually for.\u003c\/li\u003e\n\u003cli\u003eEvery finding with its source and retrieval date; any Critical finding held for human review before it is sent.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eThe authorisation record — target, domain, basis, mode, time and operator — printed on the cover.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBuyers, brokers and diligence advisors, and any business about to give a supplier access to its systems. It tells you whether to commission a full engagement and what to ask in it.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11\u003c\/li\u003e\n\u003cli\u003eNo administrator rights needed\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eThe target's legal name and main domain, typed twice\u003c\/li\u003e\n\u003cli\u003eYou must own or control the organisation, or hold written authorisation or a signed engagement covering it — you choose one of those two, there is no third option, and your choice is recorded on the report\u003c\/li\u003e\n\u003cli\u003eAbout 25 minutes\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. In this scan that boundary is structural: the products that scan ports, probe websites or test storage are not in it, and a test fails the build if anything opens a connection to the target beyond three ordinary page requests. It does not assess that organisation's security and cannot tell you whether their internal controls are sound. It is not cyber due diligence and is not a substitute for it. It is not a certification, an audit or an attestation. The report describes what the public record shows, as at the date it was retrieved, from the sources it names.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916809957688,"sku":"PRO-ACQ-58","price":499.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PRO-ACQ-58.png?v=1788725930"},{"product_id":"quickscan-physical-hardware-digital-asset-audit","title":"Physical Hardware \u0026 Digital Asset Review – 9 Scans, One Asset Inventory Report","description":"\u003cp\u003e\u003cstrong\u003eWhat you own, physically and digitally, and who controls it — usually including the devices nobody wrote down.\u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003eThe Physical Hardware \u0026amp; Digital Asset Review builds a full inventory of what a business owns and controls. On the machine: hardware identity, firmware, boot integrity, disk encryption and recovery-key escrow, and the USB device history. On the network: everything connected. On the public record: who your domains are registered to, when they expire, and the supplier dependency map. Plus backups, software lifecycle, the router, and the equipment-handling and insider questions. The headline is the gap between the asset register you think exists and what was actually found.\u003c\/p\u003e\u003ch3\u003eWhat's included\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eHardware \u0026amp; Firmware Check\u003c\/strong\u003e — hardware identity, firmware age, Secure Boot, TPM, encryption and recovery keys, USB history ($49)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eDigital Asset Register \u0026amp; Ownership Check\u003c\/strong\u003e — who controls the domains, expiry, transfer lock, supplier map ($79)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWindows Security Health Check\u003c\/strong\u003e — antivirus, firewall, updates, disk encryption ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eOut-of-Date Software Scan\u003c\/strong\u003e — software that no longer receives security updates ($19)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRansomware Readiness Check\u003c\/strong\u003e — backups, shadow copies, RDP exposure, macro settings ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eSmart Device Exposure Scan\u003c\/strong\u003e — cameras, plugs and hubs exposing services on the network ($39)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWi-Fi \u0026amp; Home Network Check\u003c\/strong\u003e — wireless encryption, auto-connect profiles, unknown devices ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eRouter \u0026amp; Wi-Fi Settings Checklist\u003c\/strong\u003e — default passwords, UPnP, remote admin, WPS, firmware ($29)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eInsider Risk Self-Assessment\u003c\/strong\u003e — the access, offboarding and control questions insurers ask ($39)\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003cstrong\u003eBought separately: $351. This review: $249.\u003c\/strong\u003e\u003c\/p\u003e\u003ch3\u003eWhy the review beats nine separate scans\u003c\/h3\u003e\u003cp\u003eAn asset register is the first control in every framework and the one small businesses most often do not have. Nine scans see nine slices of the same estate; only the combined report puts the unencrypted laptop, the camera nobody registered, the domain in an ex-employee's name and the recovery key nobody escrowed on one list — mapped to NIST CSF 2.0 asset management, with NIST SP 800-88 cited wherever disposal comes up.\u003c\/p\u003e\u003ch3\u003eWhat you get\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eOne written PDF report emailed back to you, typically within one business day.\u003c\/li\u003e\n\u003cli\u003eA per-surface score — machine, network, public record, controls — and a combined picture of the estate.\u003c\/li\u003e\n\u003cli\u003eThe asset register itself, as a table you keep: hardware, devices, domains, certificates, suppliers.\u003c\/li\u003e\n\u003cli\u003eAttack-chain analysis across all nine scans, and cross-scan corroboration so a finding seen three times appears once, marked confirmed.\u003c\/li\u003e\n\u003cli\u003eNamed coverage gaps for anything that could not be checked — never quietly counted as a pass.\u003c\/li\u003e\n\u003cli\u003eA 90-day action plan ordered by impact.\u003c\/li\u003e\n\u003cli\u003eAn executive summary you can hand to an insurer, a buyer or a board.\u003c\/li\u003e\n\u003cli\u003eReporting built to CompTIA Security+ and PenTest+ practice standards.\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWho it's for\u003c\/h3\u003e\u003cp\u003eBusiness owners answering a cyber-insurance questionnaire, preparing to sell or be acquired, or simply trying to find out what the business actually owns after years of adding things.\u003c\/p\u003e\u003ch3\u003eRequirements\u003c\/h3\u003e\u003cul\u003e\n\u003cli\u003eWindows 10 or Windows 11, on the machine and network you want inventoried\u003c\/li\u003e\n\u003cli\u003eRun as administrator\u003c\/li\u003e\n\u003cli\u003eAn internet connection\u003c\/li\u003e\n\u003cli\u003eYour domain, website and business name\u003c\/li\u003e\n\u003cli\u003eAbout 30 minutes, including the questions\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eWhat this is not\u003c\/h3\u003e\u003cp\u003eQuickScan is detection and advisory only. Nothing here changes a firmware, encryption, network or device setting, reads the contents of any drive or USB device, exploits a weakness, or leaves anything running behind it. It is not a certification, an audit or an attestation.\u003c\/p\u003e\u003cp\u003e\u003csmall\u003eOne-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.\u003c\/small\u003e\u003c\/p\u003e","brand":"ThreatVector","offers":[{"title":"Default Title","offer_id":52916809990456,"sku":"PRO-ASSET-59","price":249.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/files\/card-PRO-ASSET-59.png?v=1788725931"}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1011\/7123\/3080\/collections\/automated-security-scans-threatvector-quickscan.png?v=1788893430","url":"https:\/\/cybermafia.store\/collections\/skills-scripts-guidebooks.oembed","provider":"ThreatVector","version":"1.0","type":"link"}