Security · Cyber Assurance · 03
Independent technical assessments
An independent technical assessment is a hands-on examination of a system, environment or application by assessors with no stake in its design, its vendor or its operation. It is needed when a system is about to carry sensitive data or a critical process, when a vendor’s own assurance is the only assurance on file, when a customer or regulator asks for an independent opinion, or when internal teams disagree about a risk and need a neutral finding. The assessment produces findings tied to specific configurations and behaviors observed, each rated by exploitability and consequence, with the evidence that supports the finding and a remediation path. It is independent in the only sense that matters: we have no product to sell and no design to defend.
Scope
What the review covers.
- Configuration review of servers, cloud services, identity providers and network devices in scope
- Authentication, authorization and session handling
- Data protection in transit and at rest, and key management
- Logging, monitoring and alerting coverage for the system
- Patch and vulnerability status against vendor and public advisories
- Comparison of the deployed state with the documented design
Deliverables
What you receive.
| Deliverable | Form |
|---|---|
| Findings report | Each finding with evidence, rating, affected components and remediation |
| Configuration baseline | The observed state, usable as the reference for change control |
| Remediation plan | Sequenced by exploitability and consequence |
| Technical debrief | Working session with the engineers who own the system |
Prerequisites
What we need from you.
- Scope definition: the systems, environments and accounts included
- Read-only or assessor credentials, or supervised administrator sessions
- Change-freeze or notification agreement for the assessment window
Related
Where this sits.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days
Questions
Asked before engaging.
Is this a penetration test?
Not by default. A penetration test is one method an assessment may include when the scope calls for it. The assessment is broader: configuration, design and operation, not only exploitation.
Who performs the work?
Practitioners who build and run these systems in production, which is why findings are specific to configuration rather than generic.
Can the assessment be delivered under our partner’s name?
Yes. See Partner / White-Label Delivery.