Frequently asked questions
Clear agreements before the technical work
The key boundaries, deliverables and costs in one place.
Is the outside-in check really free?
Yes. I spend no more than 15–20 minutes on passive, public checks and provide brief feedback. It is not a full security assessment.
What is included in the External Exposure Scan?
One domain and up to three public IP addresses, including reachable services, RDP/VPN, management interfaces, TLS, DNS, email security and relevant known vulnerabilities. You receive evidence, risk, remediation advice and one retest.
Does JotaSec run active scans without asking?
No. Active checks happen only with written authorisation, against explicitly named systems and within an agreed scope and time window.
Do you need administrator access?
Not for the external scan. Temporary, appropriate access may be needed only if you also request remediation. It is agreed in advance and removed afterwards.
Can JotaSec work with our IT provider?
Yes. I can discuss findings directly with your internal IT team or MSP. They can implement the measures, or we can do it together.
How quickly can work start?
This depends on availability, authorisation and scope. After intake you receive a realistic schedule; same-day emergency assistance is not guaranteed.
Are the listed prices fixed?
They are guide prices excluding VAT for the stated scope. Additional domains, IP addresses or work are quoted separately in advance.