Real Estate Office Hardening Bundle

The brokerage's computers, mapped to NIST CSF 2.0.

What it is

Runs twenty-two checks on this computer, the network it is on and the domains you declare, asks your brokerage's questions once, and maps everything to NIST CSF 2.0 in one report. Nothing is changed.

A closing is lost to one forged e-mail with new wiring instructions, and your clients and your insurer ask how the brokerage verifies a wire, stands against a look-alike domain and handles agents' devices. This bundle gathers what one office can show: its computers, the doors transaction records could leave through, your domain and the domains one letter from it, your principals' public footprint, and your own answers.

The framework

Mapped to NIST CSF 2.0 — with the FTC Safeguards Rule by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.

Who it is for

A brokerage, an agent's office, a property-management company or a title and escrow office with its own computers and domain. A national brokerage or franchise network is measured across its offices and is the human-delivered engagement's customer; this bundle is one office's first look.

A national brokerage, franchise network or title company is measured across every office, platform and affiliated agent. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the office computer it ran on and is a useful first look for the broker who ran it.

What runs (22 checks)

• Windows Security Health Check (ENDPOINT-01)
• Ransomware Readiness Check (RANSOM-READY-03)
• Account & Access Review (INSIDER-ACCESS-05)
• Credential Hygiene Check (PW-HYGIENE-11)
• Out-of-Date Software Scan (EOL-16)
• Startup & Persistence Check (PERSIST-24)
• Wi-Fi & Home Network Check (WIFI-LAN-02)
• Router & Wi-Fi Settings Checklist (ROUTER-22)
• Email Spoofing & BEC Check (BEC-08)
• Breach & Identity Exposure Check (BREACH-10)
• Insider Risk Self-Assessment (INSIDER-21)
• Industry Readiness Questionnaire (READINESS-91)
• Internet Exposure Scan (EXPOSURE-06)
• Website & Storefront Checkup (STOREFRONT-07)
• Certificate & Encryption Check (TLS-09)
• Domain & DNS Security Check (DNS-63)
• Business Impersonation & Typosquat Sweep (IMPERSON-19)
• Digital Footprint Report (FOOTPRINT-12)
• Travel Connection & Device Safety Test (TRAVEL-72)
• Cloud Storage Exposure Check (BUCKET-28)
• AI Usage & Shadow-AI Exposure Review (AIUSE-70)
• Removable Media & Cloud Sync Check (DATAEXIT-76)

Before it runs: one question you can say no to

• May the Removable Media & Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.

Price

$449 one-time. Run it every 90 days as the Quarterly Real Estate Office Hardening (IND-REALTY-Q-82): $549 a year for four runs with a trend line on every check.

What it never does

It never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.