A security team you don't have to hire.
On-demand cybersecurity expertise, assessments, architecture and leadership for businesses without a full-time security team.
- CISSP and OSCP certified
- Fixed scope, agreed before work starts
- Works alongside your IT provider
- Based in Moncton, serving businesses across Canada
What prompted the question?
You do not need to know what is wrong before you call. Most clients start with one of these. See all services.
-
I'm not sure how secure we are.
A fixed-scope review of identity, email, backups, endpoints and remote access, ending in a short list of what to fix first.
Cybersecurity Health Check
-
We run on Microsoft 365.
A review of how your tenant is configured, with specific changes to make accounts, email and shared files harder to break into.
Microsoft 365 Security Tune-Up
-
Our insurer is asking about our security controls.
A gap review of your controls against typical insurer requirements, so renewal questions get honest answers.
Cyber Insurance Readiness
-
What happens if ransomware hits us?
An assessment of whether your backups, access controls and response plan would hold up if ransomware got in.
Ransomware Readiness
-
Our employees are already using AI.
A review of how your people use AI tools, what data goes into them and which controls and policies you need.
AI Security Assessment
-
We already have an IT provider.
Independent security architecture expertise for projects and technology decisions, working alongside your existing IT provider.
Virtual Security Architect
Assess, fix, advise
Most work follows one path: find out where you stand, fix what matters most, confirm the fixes worked, and keep senior advice on hand if you want it. You can start anywhere on it.
Assess
Find out where you stand
Fixed-scope reviews that show what is exposed, what matters and what to fix first.
Fix
Fix what matters
Guidance for your IT provider on fixing what matters, in priority order, then a check that it worked.
Advise
Keep senior help on hand
Security leadership, architecture and governance that continue after the assessment.
Specialist capabilities
- Penetration TestingManual, consultant-led testing of web applications, networks, cloud, mobile apps and APIs, reported by business risk.
- AI Application Security TestingSecurity testing of LLM applications, chatbots, RAG systems and AI agents, mapped to the OWASP Top 10 for LLM Applications.
- OT / ICS SecurityIEC 62443-aligned assessments and programs for operational technology, planned around safety, uptime and industrial constraints.
- Data SanitizationDocumented media sanitization to NIST SP 800-88, with chain-of-custody records and a certificate for every asset.
Find out where your cybersecurity stands
A Cybersecurity Health Check is a fixed-scope review of the security basics a small business depends on, such as sign-in, email, backups, devices and remote access. It ends in a short, ranked list of what to fix first.
What you receive
- An executive summary a business owner can read in five minutes
- An overall risk rating
- The key risks, in plain language
- Findings ranked by what to fix first
- Quick wins you can finish in days
- A 90-day action plan
- Longer-term improvements, in a sensible order
The Health Check is a paid, fixed-scope assessment. Scope and price are agreed in writing before it starts, and most clients begin with the free consultation.
Your MSP keeps your systems running. We help make sure they are secure.
Avertix is an independent security layer beside your IT provider. We do not replace them, and we do not resell IT services.
| Your IT provider | Avertix |
|---|---|
| Day-to-day IT operations | Independent security assessment |
| User support and the help desk | Security architecture and design |
| Devices, endpoints and infrastructure | Governance, risk and compliance |
| Routine administration and patching | Penetration testing and security validation |
| Keeping systems available | Security strategy and requirements for projects and vendors |
The person who scopes the work does the work.
Avertix combines offensive security, governance and risk, security architecture and industrial (OT) security. Testing experience shapes the defensive advice, so findings reflect how attackers actually get in, and recommendations fit how the business runs.
- Industries
- Oil and gas, financial services, manufacturing and municipal government
- Certifications
- CISSP, OSCP, CompTIA PenTest+, CompTIA Security+ CE, Microsoft SC-900
- Delivery
- PRINCE2 Practitioner, ITIL v3 Foundation
- Education
- MBA, B.Eng in Electrical/Electronics Engineering
Avertix gave us a fixed price up front, scoped it in one 45-minute call, and hardened our site without disrupting a thing. No retainer, no upsell.
How an engagement works
Not every engagement uses every step. A Health Check covers the first three. Remediation Guidance & Retesting covers improving and validating. Advisory work is the last. More on the process.
-
Understand
Your business, your systems and the concern that prompted the call.
-
Assess
Find the vulnerabilities, risks and design weaknesses.
-
Prioritize
Separate what is critical from what can wait.
-
Improve
Practical fixes, made by your IT provider with our guidance.
-
Validate
Confirm the fixes address the risk.
-
Advise
Senior help on hand, if you want it.
Questions we get from businesses your size
We are a small business. Can we afford this?
We do not have an IT team. Can you still help?
We already have an IT provider. Where do you fit?
Can you guarantee we will pass an insurance review or an audit?
What happens in the free consultation?
Is the Health Check free too?
Do you work outside New Brunswick?
Talk to a senior security consultant
Start with a free 45-minute consultation. Bring the concern, the audit finding or the insurance question. You leave with a recommended next step, whether or not you hire us.
Book a Security Consultation