Outside Check
Your website, your email and the internet line at the office can stay untouched for years. Even so, new security flaws turn up in software you already have, and certificates expire without anyone noticing. We look at your business from the outside, the way an attacker does. The difference is that we do it with your permission, and that you find out what should be fixed.
If your business has a website, email on its own domain or internet at the office, some of this is visible to anyone on the internet. Outside Check is like walking around the building to see whether any doors are open. We try no keys and we do not go in. We only look around, and then we tell you what we found, plainly and without jargon.
Two ways to do it
NOK 2,490 excl. VAT, paid once.
For when you want to know where things stand right now.
NOK 490/month excl. VAT. No binding period.
For when you want to know when something changes.
One-off check
Much of the equipment in an office is connected to the internet. The surveillance camera, the file server, the printer and the router are some examples. Often some of it is set up so that you or a supplier can reach it from outside. Then others can reach it too.
A common example is a surveillance camera you can watch from your phone at home. If you can reach it from anywhere, often everyone else on the internet can too. Then anyone can have a go at the login.
We go through everything at the office that answers from the internet, and tell you what it is and whether it should be closed. If we find something we do not recognise, we work it out together with you.
Chillers and freezers in your shop? Read more: shop refrigeration
We only see what can be reached from the internet. Equipment that is only on the office's internal network, we do not see. That is also not what an attacker on the outside sees first.
Outside Check Watch
Because the world around you changes. Software that has stood untouched for a year can one day have a security flaw that attackers are using right now. The certificate on the website expires. A provider changes a setting for your email. None of this requires you to have done anything.
With the watch we check everything again every month. Between the checks we keep watch every day, and you get a warning the same day we discover any of this:
A security flaw that attackers are using right now, in software we have found at your business.
A new security flaw of high severity in software we have found at your business.
The certificate on the website or the email expires in three weeks. You hear from us again a week before.
Changes to the public settings that control your email and your domain, for example who is allowed to send email in your name.
Every warning says what has happened, what it means for you and what you should do. If you want us to sort it out, you get a fixed price first.
Between the checks we do not connect to your systems. We keep watch from the outside, and if someone opens a new door to the internet, we see it at the next monthly check.
Leaked passwords: you can be notified as soon as one of your email addresses turns up in a new data breach. We set that up together with you.
The report as documentation
Every month you get a dated report. It can be used as documentation when, for example, your insurer, your bank or a larger customer asks what you do about security.
What we look at
Services at the office or on the server that answer when anyone knocks. Often it is something that was opened for a supplier once and never closed again.
Whether remote control of computers and other equipment at the office can be reached from the whole internet, and whether login pages on the website are open to everyone. Doors like these are what attackers look for.
Whether anything that is visible runs a version with known security flaws that an update exists for.
That the certificate on the website and the email is valid, is not about to expire, and is set up so that the traffic is encrypted.
Whether others can send email that looks like it comes from your address. That is how many attempts at invoice fraud begin.
Whether your employees' email addresses appear in known data breaches, so that the passwords should be changed. We check this together with you.
What you get
Green, yellow or red for each area, so you see at once whether anything is urgent.
For each finding it says what it means for you and what should be done. No jargon you have to look up.
We go through the report with you, by phone or video. You can ask about anything that is unclear, and together we work out what is urgent.
If we find something, you get a fixed price for fixing it before we start. Usually we sort it out remotely, without coming by. You decide whether we do it.
What we never do
We never try to log in, not even with default passwords. We attack nothing, exploit no security flaws and change nothing in your systems. We only check what is in the agreement, and we do it at a calm pace.
If you get an email from someone who has "found a security flaw" at your business without you asking for it, be on your guard. That is how the people who want in write too.
Price
Both cover one domain and the internet line at the office. Fixing findings is agreed at a fixed price for each job, before we start.
One-off check
NOK 2,490
excl. VAT
One check, report and walkthrough. No subscription.
Outside Check Watch
NOK 490/month
excl. VAT
First check included. No binding period, one month's notice.
Changed your mind? If you start the watch within 30 days of receiving the report from the one-off check, the full price of the one-off check is deducted from your first invoices for the watch. You do not pay twice.
Is your website or email with us? Then this is already included.
What we run for you, we check and keep watch on as part of running it, at no extra cost.
How to order
Fill in the form below with your name, email, the domain it concerns and whether you want a one-off check or the watch. You can also email security@databank.no or call +47 469 59 246. We reply by the next working day at the latest.
You get a short agreement that says exactly what we check, when we do it and which address the check comes from. It is signed by the managing director or the chair of the board.
The check runs in the time window set out in the agreement. You get the report shortly after, and then we go through it together. With the watch we continue every month and warn you when something new turns up.
Questions and answers
For many it is. If you rarely change anything and want to know where things stand, a one-off check is a good place to start. But new security flaws turn up in software you already have, even when you touch nothing. If you want to know when that happens, the watch is for you.
We find what answers from the internet on your public address. We do not see what is only on the internal network. If a camera or a router answers on the same port as an ordinary website, it can look like a website to us. So it helps if you tell us what you have connected, and we will look for it.
It is built to be careful. We go slowly and try no logins. In rare cases very old equipment can react by slowing down or restarting. If you notice anything, call us and we stop at once.
Yes. Whatever is checked, you must be allowed to let us check. If the website is with someone else, or the router is rented from your internet provider, we need a yes from them too. We help you get it.
The contact person you have named, and us. The findings are treated as confidential.
No honest provider can promise that. The report shows how things looked from the outside on the day we checked. It says nothing about what happens on the inside, like an employee clicking the wrong link. But it shows you whether any of the obvious doors are open. And new security flaws can turn up the day after. That is what the watch is for.
Some of it, yes, and that is good. The Norwegian National Security Authority (NSM) has free advice for small businesses. With us you pay for it being done thoroughly, for someone explaining what it means, and for it being fixed.
A one-off check ends by itself, so there is nothing to cancel. You cancel the watch with an email. The checks stop at once, and we confirm in writing the same working day. The subscription has one month's notice.