Vulnerability scanning — find the holes before someone else does.

Related, but different — and getting closer with our Threat Simulation tier. True penetration testing is manual work by a certified human security professional who actively tries to break into your systems, chains findings into an attack narrative, and often runs social-engineering or physical-intrusion tests alongside. That's $5,000-$25,000+ per engagement and available via our partner network. Our base Vulnerability Scan is the automated cousin — scheduled scans that look for known vulnerabilities. The Threat Simulation tier sits in between: it runs automated attack simulations, chains findings into an AI-generated executive attack narrative, tests phishing susceptibility, and (for managed IT clients) correlates external findings with endpoint reality. It's not a replacement for certified human pen testing, but it delivers 60-70% of the same value at a fraction of the cost. Most Cape Breton businesses should start with Vulnerability Scan or Exposure Monitor, layer Threat Simulation once you've closed the obvious gaps, then commission a partner pen test only if compliance or a specific risk demands it.

They're the two premium tiers of our vulnerability scanning product. Exposure Monitor ($149/mo standalone, $99/mo bundled with managed IT) adds dark-web credential monitoring, attack-surface discovery (subdomain enum, exposed cloud storage, GitHub secret leaks), safe exploit validation on discovered CVEs, email spoofability analysis, and OWASP Top 10 web-app scanning. Threat Simulation ($299/mo standalone, $399/mo with endpoint correlation for managed IT clients) adds automated phishing susceptibility testing, an AI-generated executive attack narrative that tells the story of how a breach would unfold in your environment, continuous monitoring with change alerts, and — for managed IT clients — endpoint reality correlation using NinjaOne and Bitdefender GravityZone data that no standalone scanner can offer. Both are live and available today — start via the buttons on the pricing cards above.

Open ports (what's listening on the internet, what shouldn't be), known CVEs (published vulnerabilities in the software you're running), outdated software versions, SSL/TLS misconfigurations, weak cipher suites, missing security headers on web servers, exposed admin interfaces, default credentials, and common web-application weaknesses. Everything an opportunistic attacker would find in the first 15 minutes of poking at your infrastructure.

One public-facing IP address (your firewall / router / server) plus one website domain (say, chantsit.com). That covers most small businesses with a simple setup. If you have multiple offices, multiple servers, or multiple websites, each extra target is $20-35/month depending on scan frequency.

External scans are generally non-disruptive — we're checking your public-facing infrastructure the same way an attacker would, from outside your network. You may see extra traffic in your firewall logs during scan windows. For particularly noisy or aggressive scan modes we schedule off-hours or coordinate with you. In eight years of running these scans for clients, we've never taken a system offline with one.

Detailed but readable — designed for a business owner or IT manager, not just a security specialist. Each finding gets a severity rating (Critical / High / Medium / Low), a plain-English description of what it is and why it matters, and a specific remediation recommendation. Month-over-month comparison shows what's been fixed and what's new. Delivered by email; also downloadable as PDF for your files.

Depends on your setup. If you're a managed IT client, we fix the findings as part of your ongoing support. If you're not, you get the report and hand it to your own IT staff (or hire us hourly for the remediation work). We can also do a fixed-fee "scan + remediation" bundle for common findings — ask us during setup.

The tools are similar under the hood — but running them, interpreting the noise, filtering false positives, and turning results into a plain-language report takes real time and expertise. Most in-house teams try it once, get a 400-page PDF full of "informational" findings that mean nothing, and give up. We handle the whole cycle so you get a short, actionable report instead of a wall of noise.

No. Month-to-month. Cancel at any month boundary. Most clients start with 1 scan/month at the base tier ($29 for base package), and add extra targets or bump to 2 scans/month once they see the value.