External IT security for SMEs

Find out what attackers can see from outside your network.

JotaSec maps publicly reachable servers, websites, VPN/RDP, admin interfaces and email security. You receive evidence, clear priorities and practical measures to reduce risk.

  • Passive initial check
  • Active testing only with authorisation
  • Evidence, priorities and remediation advice
Visible from the internet
3389RDP / remote accessreview
443VPN, TLS and certificatesreview
DNSSPF, DKIM and DMARCreview
WEBAdmin interfaces and softwarereview

Non-destructive checks, strictly within the agreed scope.

Free initial assessment

Want to know where you stand?

I spend up to 15–20 minutes reviewing only public sources and passively visible signals relating to one organisation or domain. You then hear directly whether anything warrants further investigation.

  • No active port scan
  • No access or login attempts
  • Brief personal feedback

Clear services and pricing

From visible risk to a practical solution

Choose a clearly scoped external scan, a broader baseline review or hands-on remediation. You know in advance what I will review, what you will receive and what it will cost.

Security Baseline Review

Practical review of the most important internal security controls.

€795 excl. VAT
  • MFA and identity
  • Patching and endpoints
  • EDR/antivirus and firewall
  • Backups and recoverability
  • Microsoft 365 and/or Active Directory
  • Priorities and a practical improvement plan
Discuss this package

Remediation and hardening

Hands-on help to resolve findings and reduce risk sustainably.

€85 per hour · excl. VAT
  • Server and Windows hardening
  • Firewall and access rules
  • Endpoint and malware protection
  • Fixed block price available after scoping
Discuss this package

Monthly external monitoring

Periodic checks for changes in the public attack surface.

€69 per month · excl. VAT
  • Newly reachable services
  • Important TLS and DNS changes
  • Notification of relevant deviations
  • Short monthly update
Discuss this package

How it works

Clear agreements, controlled execution

No surprises: before work starts, we define what I will review, what is outside scope and what you will receive.

Scope

We define goals, domains, IP addresses and boundaries.

Authorisation

Active checks start only after written authorisation.

Analysis

I collect evidence and validate findings non-destructively.

Solution

You receive priorities, concrete actions and an agreed retest where applicable.

No active scan without approval

Active security scans are performed only after written authorisation and within a scope agreed in advance. The free outside-in check remains passive.

Are you sure what is exposed to the internet?

Start with the free initial check or have your public attack surface examined with the External Exposure Scan.