Low-Level Secure Configuration Review · Per system
Default settings are an open invitation.
We examine the security settings on each system in scope, compare them with vendor benchmarks and hardening guidance, and give your administrators a precise remediation for every weakness we find, system by system.
Why it matters
Small settings. Serious consequences.
Defaults are rarely secure
Systems ship to be easy to install, not hard to attack. Default accounts, open services and weak protocols stay until someone checks.
Drift happens quietly
Patches, quick fixes and staff changes alter settings over time. A review shows how far each system has moved from a secure state.
Fixes your admins can apply
Every finding comes with the specific remediation for that system, so administrators can act without decoding a generic checklist.
How we deliver
Five steps. Every setting accounted for.
We collect configurations with your administrators rather than scanning blindly, so results reflect how each system is actually built.
Scope the systems
We agree which servers, databases, network devices and platforms are in scope, and how configurations will be collected safely.
Research the benchmark
For each system type we compile vendor recommendations, hardening guidelines and guidance from security research institutes.
Collect configurations
With your administrators we gather settings through read-only access, configuration exports or approved collection scripts.
Assess every setting
Each configuration is compared with the benchmark: accounts, authentication, services, logging, encryption and patch level.
Report per system
A detailed report for each system lists the weaknesses in its configuration and the recommended remediation for every finding.
What we cover
The systems we review, the settings we examine and what you receive.
Expected outcomes: systems hardened closer to vendor benchmarks, less configuration drift, and per-system evidence for auditors.
01 · Review
Systems we review
Windows and Linux servers
Databases
Routers, switches and network devices
Virtualisation and cloud platforms
Security appliances
02 · Check
Settings we examine
Accounts, passwords and privileges
Authentication and remote access
Running services and open ports
Logging and auditing
Encryption and protocol versions
Patch and version levels
03 · Deliver
What you receive
A detailed report for each system
The weaknesses found in its configuration
Recommended remediation for every finding
Track record
Technical assessments for regulated sectors.
Aviation & industrial · Jordan · 2025
Vulnerability assessment for an aviation and industrial client
Government & semi-government · KSA · 2025
Vulnerability assessment for a Saudi public body
Enterprise & commercial · KSA · 2025
Security solutions & Fortinet professional services awarded
Related services
Harden once. Keep it that way.
A configuration review fixes today's settings. These services set the standard, find new weaknesses and keep exposure under control.
Minimum Baseline Security Standard
Turn review findings into a written minimum standard that every new and rebuilt system must meet.
Explore MBSSVulnerability Assessment
Scanning and analysis across operating systems and applications to find and prioritise weaknesses.
Explore assessmentsFirewall Rules Review
Rule-by-rule analysis of your firewalls, with a recommended change for every misconfigured rule.
Explore firewall reviewVulnerability Management
A managed solution to identify, prioritise and track vulnerabilities continuously rather than once a year.
Explore the solutionFAQ
Configuration reviews, answered.
What administrators and security managers ask before a configuration review.
Which systems can you review?
Servers, databases, network devices, security appliances and other platforms. We confirm coverage for each product and version during scoping, and research the right benchmark for each one.
Will you change settings on our systems?
No. We collect and analyse configurations without changing them. Your administrators apply the recommended remediation through your own change process, at a time that suits your operations.
What does a configuration review catch that a scan misses?
A scan probes systems for known vulnerabilities. A configuration review reads the settings themselves, which reveals weak policies and insecure options that scanners often miss.
What should our administrators prepare?
A list of systems in scope, an administrator for each platform, and read-only access or configuration exports. Where collection needs elevated rights, we agree the method with you first.
Does this support our compliance obligations?
Yes. Frameworks such as ISO 27001, NCA ECC and SAMA CSF expect systems to be securely configured. Per-system reports give auditors clear evidence of where each system stands.
Start your review
List your systems. We'll set the benchmark.
Tell us which platforms and how many systems are in scope, and a technical consultant will propose a benchmark-led review and collection plan.
Tell us the platforms and number of systems in scope
A technical consultant matches a benchmark to each
A scoped proposal and collection plan follow