Physical Hardware & Digital Asset Review – 9 Scans, One Asset Inventory Report
By purchasing you agree to our Terms of Service, including your responsibility to run scans only against systems you own or are authorised in writing to test.
What you own, physically and digitally, and who controls it — usually including the devices nobody wrote down.
The Physical Hardware & Digital Asset Review builds a full inventory of what a business owns and controls. On the machine: hardware identity, firmware, boot integrity, disk encryption and recovery-key escrow, and the USB device history. On the network: everything connected. On the public record: who your domains are registered to, when they expire, and the supplier dependency map. Plus backups, software lifecycle, the router, and the equipment-handling and insider questions. The headline is the gap between the asset register you think exists and what was actually found.
What's included
- Hardware & Firmware Check — hardware identity, firmware age, Secure Boot, TPM, encryption and recovery keys, USB history ($49)
- Digital Asset Register & Ownership Check — who controls the domains, expiry, transfer lock, supplier map ($79)
- Windows Security Health Check — antivirus, firewall, updates, disk encryption ($29)
- Out-of-Date Software Scan — software that no longer receives security updates ($19)
- Ransomware Readiness Check — backups, shadow copies, RDP exposure, macro settings ($39)
- Smart Device Exposure Scan — cameras, plugs and hubs exposing services on the network ($39)
- Wi-Fi & Home Network Check — wireless encryption, auto-connect profiles, unknown devices ($29)
- Router & Wi-Fi Settings Checklist — default passwords, UPnP, remote admin, WPS, firmware ($29)
- Insider Risk Self-Assessment — the access, offboarding and control questions insurers ask ($39)
Bought separately: $351. This review: $249.
Why the review beats nine separate scans
An asset register is the first control in every framework and the one small businesses most often do not have. Nine scans see nine slices of the same estate; only the combined report puts the unencrypted laptop, the camera nobody registered, the domain in an ex-employee's name and the recovery key nobody escrowed on one list — mapped to NIST CSF 2.0 asset management, with NIST SP 800-88 cited wherever disposal comes up.
What you get
- One written PDF report emailed back to you, typically within one business day.
- A per-surface score — machine, network, public record, controls — and a combined picture of the estate.
- The asset register itself, as a table you keep: hardware, devices, domains, certificates, suppliers.
- Attack-chain analysis across all nine scans, and cross-scan corroboration so a finding seen three times appears once, marked confirmed.
- Named coverage gaps for anything that could not be checked — never quietly counted as a pass.
- A 90-day action plan ordered by impact.
- An executive summary you can hand to an insurer, a buyer or a board.
- Reporting built to CompTIA Security+ and PenTest+ practice standards.
Who it's for
Business owners answering a cyber-insurance questionnaire, preparing to sell or be acquired, or simply trying to find out what the business actually owns after years of adding things.
Requirements
- Windows 10 or Windows 11, on the machine and network you want inventoried
- Run as administrator
- An internet connection
- Your domain, website and business name
- About 30 minutes, including the questions
What this is not
QuickScan is detection and advisory only. Nothing here changes a firmware, encryption, network or device setting, reads the contents of any drive or USB device, exploits a weakness, or leaves anything running behind it. It is not a certification, an audit or an attestation.
One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.
TommyGun is developed by ThreatVector LLC. Reporting mechanisms and cybersecurity customer service are powered by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.