Open doors to the internet
Services at the office or on the server that answer when anyone knocks. Often it is something that was opened for a supplier once and never closed again.
Outside Check
See your business the way a burglar sees it
Once a month we look at what your business shows to the internet, the same way an attacker would. The difference is that we do it with your permission, and that you find out what should be fixed.
Order Outside CheckNo binding period. Nothing is checked until you have signed.
What is Outside Check?
If your business has a website, an email address on its own domain or internet at the office, some of it is visible from all over the world. Outside Check is a walk around the building to see whether any doors are open. We try no keys and we do not go in. We only look, and tell you in plain language what we found.
What we look at
The same things an attacker looks for
The router and remote access
Whether the login page of the router, the cameras, the refrigeration system or the remote control of the office computers can be reached from the whole internet. Pages like these are what attackers look for.
Outdated software
Whether anything that is visible runs a version with known security holes that an update exists for.
The padlock in the browser
That the certificate on the website and the email is valid, is not about to expire, and is set up so that the traffic is encrypted.
Fake email in your name
Whether others can send email that looks like it comes from your address. That is how many attempts at invoice fraud begin.
Leaked passwords
Whether your employees' email addresses appear in known data breaches, so that the passwords should be changed. We look at this together with you, through a free Have I Been Pwned account that your business creates itself. That way you own the lookup.
What you get
One page a month, and help fixing it
A one-page report
Every month you get one page in plain language. Green, yellow or red for each area, so you see at once whether anything is urgent.
What it means, and what to do
For each finding it says what it means for you and what should be done. No jargon you have to look up.
Fixes at a fixed price
If we find something, you get a fixed price for fixing it before we start. Usually we sort it out remotely, without coming by. You decide whether we do it.
What we never do
We look, we touch nothing
We never try to log in, not even with default passwords. We attack nothing, exploit no holes and change nothing in your systems. We only check what is in the agreement, and we do it at a calm pace.
If you get an email from someone who has "found a security flaw" at your business without you asking for it, be on your guard. That is how the people who want in write too.
Price
What it costs
For one domain and the internet line at the office. Fixing findings is agreed at a fixed price for each job, before we start. No binding period.
The first check is free. If you like what you get, we continue for NOK 490 a month. If you don't, that's the end of it.
Is your website or email with us? Then this is already included.
What we run for you, we check as part of running it, at no extra cost.
Outside Check
NOK 490/month
excl. VAT
How to order
How to get started
1. Send us a message
Fill in the form below with your name, email and the domain it concerns. You can also email post@databank.no or call +47 469 59 246. We reply by the next working day at the latest.
2. You sign the authorisation
You get a short agreement that says exactly what we check, when we do it and which address the check comes from. It is signed by the managing director or the chair of the board.
3. We check, you get the report
The first check runs in the time window set out in the agreement. You get the report shortly after, and then once a month.
Questions and answers
What people ask
Can the check break anything?
It is built to be careful. We go slowly and try no logins. In rare cases very old equipment can react by slowing down or restarting. If you notice anything, call us and we stop at once.
Our website is with another provider. Can you still do it?
Yes. Whatever is checked, you must be allowed to let us check. If the website is with someone else, or the router is rented from your internet provider, we need a yes from them too. We help you get it.
Who sees the report?
The contact person you have named, and us. The findings are treated as confidential.
Are we safe when the report is green?
No honest provider can promise that. The report shows how things looked from the outside on the day we checked. It says nothing about what happens on the inside, like an employee clicking the wrong link. But it shows you whether any of the obvious doors are open.
Can't we do this ourselves?
Some of it, yes, and that is good. The Norwegian National Security Authority (NSM) has free advice for small businesses. With us you pay for it being done every month, for someone explaining what it means, and for it being fixed.
How do we cancel?
Send an email. We stop the checks by the next working day at the latest and confirm in writing.