Clear findings. Practical next steps.

+31 15 202 44 66 info@0confusion.com
Let's talk
  1. Home
  2. Cybersecurity QuickScan

Cybersecurity QuickScan · Pilot

A cybersecurity review you can actually read

A scoped review of the evidence you supply about your website, email and access settings. A person reviews every finding, and the report says plainly what remains unknown.

Let's talk See a sample report
A reviewer marks lines in a printed report at a meeting table

What you get

Four things, in plain language

PDF is the main format, with JSON when needed.

Management summary

A readable overview of the agreed assessment.

Findings with evidence

What supports each finding, so it can be checked.

Unknowns and limitations

What remains unverified, stated as clearly as the findings.

Priorities

What to do first, and what to ask your IT provider.

The difference

Evidence is not a pass

A green tick feels good, but it can hide what nobody looked at. We keep three things apart: what the evidence shows, what it doesn't show, and what you can do next.

Unknown evidence is never counted as a pass, and a category existing doesn't mean every aspect of it was assessed.

SAME DMARC RECORDFictional example

ObservationRecord found, policy is none, so there's no enforcement yet.
LimitationA DNS record alone doesn't show effective protection.
Next stepReview the reports with your mail provider.
ResultRecord present: tick
LimitationNot mentioned
Next stepWork it out yourself

What can be covered

Four areas, with their limits

Coverage depends on the agreed scope and the evidence available. Some areas need your information or specialist review.

Website

HTTPS/TLS, security headers, cookies and configuration indicators, and disclosed CMS or software. A disclosed version is not proof of a vulnerability.

Domain & email

Supplied DNS records, bounded SPF and DMARC assessment and supplied DKIM selector information. A DNS record alone does not demonstrate effective email protection.

Access

Supplied account, MFA and role-management configuration. No login attempts or runtime assurance. An MFA setting alone does not prove enforcement.

Privacy & dependencies

Notice indicators and declared booking or ordering providers. No legal or vendor-security certification. A privacy policy does not establish GDPR compliance.

The review categories

CategorySubject
C01HTTPS/TLS
C02Security headers
C03Website configuration
C04Software and CMS indicators
C05Domain and DNS
C06Email: SPF, DKIM and DMARC
C07Privacy indicators
C08Login and accounts
C09Booking and ordering dependencies
C10Risk aggregation and evidence review

C10 connects and reviews the findings. It is not a tenth technical scan. Coverage is agreed individually, and not every aspect of a category is automatically assessed.

What this isn't

Being clear about this saves you a wrong purchase.

  • Not a penetration test, and not a live scanning service
  • Not antivirus, a 24/7 SOC or incident response
  • No automatic remediation or compliance certification
  • No guarantee of protection

The current application doesn't scan a website from a URL by itself. It works with supplied, structured evidence. Remediation and repeat reviews aren't automatically included.

One application, five modules

The Website Security Analyst, Infrastructure Security Analyst, Identity & Access Security Analyst, Privacy & Business Risk Analyst and Cybersecurity Audit Manager are software modules of one application. They are not five employees or autonomous internet bots, and findings need substantive human review before delivery.

Permission is separate

An enquiry doesn't authorise testing. Any future active checks need an individually agreed scope and written permission from an authorised party. No active checks are launched from this website.

This is a pilot. Scope and delivery are confirmed individually for each enquiry.

FAQ

About the QuickScan

Fictional dataSample report SAP and cybersecurityAll questions
What is the Cybersecurity QuickScan?

A scoped pilot review of evidence you supply about your website, email and access settings. A person reviews the findings before delivery, and the report says what remains unknown.

Is this a penetration test?

No. The pilot reviews supplied evidence within an agreed scope. It does not attack or test live systems.

Will sending an enquiry start a scan?

No. Contacting us does not trigger a website request, DNS lookup or security check. Any assessment needs a separately agreed scope and written permission from an authorised party.

Can you guarantee that we are secure?

No. The review states what was assessed, what was found and what remains unknown. Unknown evidence is not treated as a pass.

What do the review categories cover?

C01 HTTPS/TLS, C02 security headers, C03 website configuration, C04 software and CMS indicators, C05 domain and DNS, C06 email SPF, DKIM and DMARC, C07 privacy indicators, C08 login and accounts, C09 booking and ordering dependencies, and C10 risk aggregation and evidence review. C10 connects the findings and is not a tenth technical scan. Coverage is agreed individually.

Do you fix what you find?

Not automatically. Remediation and repeat reviews are not included unless agreed. Findings and questions can be discussed with your IT provider.

Discuss a pilot review

Tell us what you want to understand. Scope, price and timing are agreed before work starts, and an enquiry doesn't start a scan.

Let's talk +31 15 202 44 66