A secondary service, offered with a partner
Our main work is keeping older software running and in your hands. Some owners also need an independent security assessment, for a customer, a partner or their own peace of mind. For those requests we offer a Security Audit.
We do not hold security certifications ourselves. The assessment is performed and signed by a certified security partner that we engage for your project. We coordinate the scope, the access and the schedule, and we help you act on what the partner finds.
How it works
- A short conversation. You tell us what the software does, why you want an assessment, and who will read the report.
- A written scope and quote. We name the partner, the systems in scope, the method, the timeline and the price before anything begins. Every Security Audit is quoted per project because scope varies widely.
- Read-only access first. The partner starts with the access you approve in writing. Anything beyond read-only needs its own signed agreement.
- A report in two parts. The partner’s signed technical report, and a plain-English summary from us that explains what matters, in what order, and what it would take to address.
- Help with next steps. If you want us to fix what was found, we quote that separately as a fixed-price project or fold it into a Support Plan.
What you get
- The partner’s report, signed by the partner.
- A plain-English summary you can share with your team.
- A priced list of next steps, so you can decide with real numbers.
- Findings as of a stated date.
What a Security Audit is not
- It is not a guarantee that your software is secure. No assessment can promise that.
- It is not a substitute for advice from your attorney or insurer.
- It is not part of a Takeover Assessment, which is about continuity, not security.
Who does what
| Task | Who |
|---|---|
| Scope, access and scheduling | Zero Exposure |
| Security assessment and signed report | Certified security partner |
| Plain-English summary and next steps | Zero Exposure |
| Fixes you approve | Zero Exposure, quoted separately |
Start the conversation
Tell us about your software and mention that you are asking about a Security Audit. We reply by email with the questions we need answered and a sense of whether it is a fit. If you simply need your older software supported, the better first step is usually a Takeover Assessment.
