Northloop Security Check

Services & pricing

Fixed price, always. Start free, move up only if you want to. No retainers required, no hourly billing.

Prices below are fixed for a firm of up to about 25 staff and 3 domains. Larger firms get a fixed quote before committing to anything. See a sample report →

External Snapshot

Free

48 hours

An automated external snapshot of your public-facing systems. Exposed services, out-of-date software, email and domain gaps. The honest starting point.

  • ✓Attack surface discovery
  • ✓Automated vulnerability checks
  • ✓Email and domain (SPF/DKIM/DMARC) review
  • ✓One-page ranked summary

One domain. Automated, passive checks only.

Request the free snapshot

Fix Your Email Spoofing

£450

1 week

The one fix most firms need first. We write the exact SPF, DKIM and DMARC records for your mail setup (Microsoft 365, Google Workspace, your case-management and marketing tools), walk your IT provider through publishing them, watch the reports for a week, then move you to an enforced policy and re-check. Done, not advised.

  • ✓Audit of every service sending as your domain
  • ✓Exact DNS records, written for you
  • ✓Move from nothing or p=none to p=quarantine, then p=reject
  • ✓Re-check and a dated confirmation you can forward

Fixed at £450 for one domain. Add a second domain for £150.

Fix my domain

External Assessment

£1,900

1 week

The full external review, human-verified. Everything the snapshot finds, checked by an engineer, plus the issues automated tools miss.

  • ✓Everything in the snapshot
  • ✓False positives removed by hand
  • ✓Manual checks scanners cannot do
  • ✓Full report with fixes, ranked by risk
  • ✓Two-page forwardable summary (pass / needs attention)

Fixed at £1,900 for a firm up to ~25 staff and 3 domains. Larger firms quoted before you commit.

Book an assessment

For law firms

Law Firm Assurance

£2,900

1 week, then quarterly for 12 months

The "prove it" package for solicitors: the assessment, a forwardable attestation letter for clients, insurers and the SRA, and a quarterly re-check with a refreshed letter for a year.

  • ✓Everything in the External Assessment
  • ✓Two-page attestation letter, written to be forwarded
  • ✓Briefing for your IT provider on what to change
  • ✓Quarterly re-check + refreshed letter, 12 months
  • ✓Priority response if something new appears

Fixed at £2,900 for a firm up to ~25 staff and 3 domains. Covers the assessment, the letter and four quarterly re-checks.

Start with the free snapshot

Assessment + Fix & Re-test

£3,500

2 weeks

Law firms do not want a plan, they want it fixed. We brief your IT provider on exactly what to change, answer their questions, and re-test once it is done. Built for Cyber Essentials and insurer conditions.

  • ✓Everything in the assessment
  • ✓Written brief for your IT provider, fix by fix
  • ✓We answer their questions while they do it
  • ✓Re-test after fixes, with an updated letter
  • ✓Evidence pack for insurers / Cyber Essentials

Fixed at £3,500 for a firm up to ~25 staff and 3 domains, including the re-test.

Scope a fix

Continuous Monitoring

£450/mo

ongoing

Your external surface changes every time someone adds a tool or a subdomain. We re-scan every month and alert you when something new and risky appears, so a forgotten deployment does not become an incident.

  • ✓Monthly external re-scan
  • ✓Alerts on new exposures
  • ✓Quarterly attestation letter, refreshed and dated
  • ✓Priority response on findings

Per firm, up to 3 domains. No minimum term.

Set up monitoring

Larger or regulated? We will tell you honestly when your needs have outgrown an external assessment and you should commission a full accredited penetration test.

Cyber Essentials

Cyber Essentials preparation

Cyber Essentials is the UK government-backed baseline that an increasing number of clients, lender panels and insurers ask law firms to hold. The self-assessment is a questionnaire; the hard part is being sure your answers are true, because the external checks are exactly where firms fail.

The Assessment + Fix & Re-test package covers the external controls the scheme tests (firewalls and exposed services, secure configuration, patching), briefs your IT provider on what to change, re-tests, and gives you the evidence pack for the application. Fixed at £3,500. Certification itself is issued by an accredited body, not by us, and we will point you to one.

  • External review of the controls Cyber Essentials tests from the outside
  • Plain-English gap list against the five control areas
  • Written brief for your IT provider, then a re-test
  • Evidence pack to attach to the self-assessment
  • Cyber Essentials Plus: we prepare you; an accredited assessor certifies

Start with your domain.

One second, no signup. Then take the full free snapshot from the result.

Check my domain

Prefer to talk it through first? Book 25 minutes

security@northloopsystems.com