Security & AI Readiness Audits
Know exactly where your security gaps and your AI/data risks are — with a clear, fixed-price report and a costed plan. No jargon, no open-ended day rates.
AI Readiness Audit
Where your data goes, what the law requires, and what you could run in-house.
A structured assessment of how your business uses AI and data, mapped to the NIST AI Risk Management Framework and the EU AI Act (and the OWASP Top 10 for LLM Applications), with a clear scorecard and a costed plan.
- A readiness scorecard across governance, data, measurement and management (NIST AI RMF)
- Which specific legal duties apply to you — EU AI Act role, UK GDPR / DPA, DPIA triggers
- A scan of your website for third-party AI and trackers already sending your data out
- Whether AI assistants can actually read your site — many rank fine on Google yet are invisible to ChatGPT, Claude and Perplexity
- Whether a private, on-premise AI model is viable on your hardware — and what it would cost
- A ready-to-adopt Acceptable AI Use policy, tailored to your answers
- A branded written report you can act on or share with your board
Security Posture Review
The security gaps an attacker looks for first — found and prioritised.
External and (where authorised) internal security checks of your website, email, network and cloud, with every finding prioritised and paired with a specific fix. Aligned to the NCSC Cyber Assessment Framework (CAF), the OWASP Top 10 and CIS benchmarks.
- Website security — headers, exposed files, outdated platforms, common vulnerabilities
- Email spoofing protection (SPF, DKIM, DMARC) — can criminals send email as your business?
- Your public attack surface — open services, forgotten subdomains, DNS hygiene
- On-site Wi-Fi and network checks, and a review of the devices on your network
- Cloud & Microsoft 365 / Google Workspace review (with your read-only access)
- A branded, prioritised report — each issue with a plain-English fix, most serious first
Both audits together — £1,500 introductory
Security and AI readiness in one engagement — still less than a single boutique audit. Standard £2,000–£3,000.
Data Protection (GDPR) add-on — +£450
Add to any Security Posture Review or AI Readiness Audit. Adds an ICO-aligned data-protection compliance assessment across the ICO control areas (lawful basis, records, individual rights, breach handling, training, PECR) plus automated evidence — cookie/PECR consent, encryption, security headers and email-spoofing protection — in one combined report.
Introductory launch pricing — limited to our first clients while we build our case studies. Standard pricing applies thereafter.
Book your audit
Tell us a little about your business and we'll confirm your audit within one working day.
These audits record the evidence you would need to demonstrate good security and compliance. They are professional assessments — not a penetration test, and not a Cyber Essentials, ISO or NCSC Cyber Resilience Audit certification. We align our work to recognised frameworks (the NCSC CAF, the ICO audit framework, the NIST AI RMF, OWASP and CIS); alignment means we assess against them, not that we certify or accredit you against them. All testing is carried out only with your signed authorisation.