What are we exposing without knowing it ?
The cabinet surveys what your sites, your forms, your extensions, your hosting, your vendors and your access rights show to the outside world, and compares that with what you believe you have. The report names every gap, its risk, and what has to be closed first.
- Price2 900 € excluding VAT, fixed price
- Lead time15 working days
- Who it is forany organisation with sites and vendors
15working days
From order to signed reportThe lead time is firm from the moment access is received. The report is handed over and discussed in session, and it remains your property.
You have sites, a succession of vendors and access rights opened over the years, with no way of knowing what all of it shows from the outside. The cabinet surveys it for you: the sites and their extensions, what the forms collect and where it goes, who holds which access with which vendor. Your teams fill in nothing and no write access is ever requested. After fifteen working days you receive a report that ranks the gaps by severity and says which one to close first. If you continue, this amount is deducted in full from the first quarter of a governance contract.
A report that names the gaps, not a statement of intent.
- The real inventory of your sites, their extensions and their versions, including the ones nobody watches any more.
- What your forms collect, where it is sent, and what is kept with no reason to keep it.
- The map of your vendors and hosting providers, with the access each one holds.
- The gaps ranked by severity, each with its risk stated in plain language and the measure that closes it.
- A session with your executive team, then the signed report, in open formats.
Order and access
A written perimeter, read-only access handed over through an agreed channel. No write access is ever requested.
Survey
Technical surveys carried out by the engineer, never by a questionnaire sent to your teams.
Drafting
Every finding is tied to dated evidence. Nothing enters the report without a survey behind it.
Delivery
A one-hour session with your executive team, signed report handed over the same day.
The limits, in writing.
An engagement that does not state its limits lets the client discover them at the worst possible moment.
- This is not a penetration test: nothing is exploited, nothing is forced. Active analysis of your exposure surface is the offensive reconnaissance engagement, under written mandate.
- This is not a remediation project: the diagnostic says what has to be closed, it does not close it. That work is the remediation plan.
- This is not a photograph that lasts: an estate changes. A governance contract exists so that what has been closed stays closed.
Know first, decide afterwards.
No follow-on engagement is imposed. If you continue, the diagnostic is deducted in full from the first quarter of a governance contract.
A first conversation of 30 minutes
No obligation, no access to your systems. We look at whether the step you are considering is the right tool for your situation, and the cabinet says no when it is not.
A signed scoping letter
The perimeter, the read-only access, the people, the delivery date and the firm price. Nothing starts before your signature.
The report, then the decision
A dated report that holds up in front of a third party, a session with your executive team, and the list of gaps ranked. You then decide what follows, or you stop there.
6 questions, 6 answers.
The cabinet's answers, in plain terms. If your question is not here, ask it: the answer comes back to you in writing.
How much does a digital sovereignty diagnostic cost, and what do you get?
2 900 € excluding VAT, fixed price, delivered in 15 working days from the moment access is received. You receive the real inventory of your sites, their extensions and their versions, what your forms collect and where it is sent, the map of your vendors and the access they hold, then the gaps ranked by severity. The report is presented in session to your executive team, signed, in open formats, and it remains your property.
Do we have to open access to our systems?
Read-only access, handed over through an agreed channel on day 1. No write access is requested and nothing is modified on your systems during the survey. The technical work is carried out by the engineer, never by a questionnaire sent to your teams.
Is this a penetration test?
No. Nothing is exploited and nothing is forced: the diagnostic observes what you show to the outside world. Active analysis of your exposure surface is a separate engagement, offensive reconnaissance, at 2 400 € excluding VAT over 5 working days, and only under written mandate.
Does the diagnostic fix what it finds?
No, and that is said before you order: the diagnostic names what has to be closed, it does not close it. Taking the critical items back is the remediation plan, at 9 500 € excluding VAT depending on perimeter. To keep closed what has been closed, the follow-on is a governance contract.
We already have an IT provider, so what is this diagnostic for?
To look at what your provider does not look at: the sites nobody watches any more, the data kept with no reason, and the access each vendor still holds. The cabinet takes no reseller commission and does not replace your provider: it writes down what is exposed and in which order to close it. If you continue, the diagnostic is deducted in full from the first quarter of a governance contract.
Who receives the report, and in what format?
Your executive team receives it in person, in a one-hour session held on day 15, and the signed report is handed over the same day in open formats. Every finding is tied to dated evidence: nothing enters the report without a survey behind it. The deliverable remains your property, which leaves you free to pass it to your provider, your insurer or your counsel. No follow-on engagement is imposed.