General Business Hardening Bundle – 19 Scans, One Complete Report

Nineteen scans, one run, one report — the closest thing to a professional assessment that runs itself.

The General Business Hardening Bundle covers every surface a small business has: the computers and the accounts on them, the office network and its devices, the domain and everything it exposes to the internet, the cloud storage nobody has looked at since it was set up, and the identity exposure of the people who work there.

What's included

• Endpoint & accounts: Windows Security Health Check ($29), Ransomware Readiness Check ($39), Account & Access Review ($39), Credential Hygiene Check ($29), Out-of-Date Software Scan ($19), Startup & Persistence Check ($39)
• Network: Wi-Fi & Home Network Check ($29), Smart Device Exposure Scan ($39), Router & Wi-Fi Settings Checklist ($29)
• Access & governance: Insider Risk Self-Assessment ($39), Active Directory Health Check ($99)
• Internet-facing: Internet Exposure Scan ($69), Website & Storefront Checkup ($69), Certificate & Encryption Check ($19), Email Spoofing & BEC Check ($39)
• Cloud & identity: Cloud Storage Exposure Check ($49), Breach & Identity Exposure Check ($39), Digital Footprint Report ($49)
• Optional: Code & Secrets Scanner ($59) — runs only if you point it at a code repository you own

Bought separately: $821. This scan: $499.

What it replaces

An IT provider charges $1,000–$2,000 for a basic automated vulnerability scan and $2,000–$4,000 for a standard assessment. Automated penetration-testing platforms start at $2,999 per test. This is a quarter to a half of the cheapest of those, with an attack-path narrative and a 90-day programme that none of them include at that price.

What you get

• One written PDF report emailed back to you, typically within one business day.
• A score for every surface, plus a combined business risk picture.
• Attack-chain analysis across every scan — the report's most valuable section, showing how findings in different scans assemble into a complete intrusion path.
• Cross-scan corroboration, so a finding confirmed by several scans is presented once and marked confirmed.
• Named coverage gaps for anything that could not be checked — never quietly counted as a pass.
• An executive summary written for an owner, a board, a client or an insurer.
• A 90-day security programme ordered by impact and effort.
• A full appendix with the detail from every scan.
• Reporting built to CompTIA Security+ and PenTest+ practice standards.

Who it's for

Small businesses facing an insurance renewal, a client security questionnaire, or simply the realisation that nobody has ever looked. Also the right starting point before commissioning hands-on work — a report that surfaces a complete attack path is the best possible brief for the engineers who fix it.

Requirements

• Windows 10 or Windows 11
• Run as administrator
• An internet connection
• Your domain, public address and storage names — you must own them or be authorised to test them
• About an hour
• The Active Directory check only produces results on a domain-joined machine; on a standalone PC it is reported as not applicable rather than as a pass

Want to keep it that way?

The Quarterly Business Checkup re-checks your business every 90 days.

What this is not

QuickScan is detection and advisory only. Nothing here logs in, submits an attack payload, exploits a weakness or changes a setting on your systems. It is not a penetration test, a certification, an audit or an attestation — if the report surfaces a complete critical attack path, it says so plainly and points you to ThreatVector's hands-on engagement.

One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.