What service should we start with?
If you are unsure, the Cyber Security Health Check is the broadest starting point. A focused vulnerability, network, workspace, incident or sensitive-data review may be more suitable when the concern is already known.
Do you perform vulnerability testing?
Yes, within an agreed and authorised assessment scope. Targets, permitted techniques, exclusions, timing and evidence handling are confirmed in writing before testing begins.
Do you need access to our systems?
It depends on the service. Evidence may be provided through guided screen sharing, screenshots, exports, read-only access or approved testing access. The safest practical method is agreed during scoping.
Should we send passwords or MFA codes?
No. Do not send passwords, MFA codes, recovery codes or credentials through the website form or ordinary email.
Will we receive a report?
Yes. Assessment services include defined deliverables such as scope, methodology, evidence-backed findings, risk priorities and recommended remediation. The exact report structure is confirmed before work begins.
Do you fix the issues too?
Scoped remediation support can help implement agreed actions and coordinate with your existing IT provider or vendors. It is not an unlimited managed helpdesk, and major migrations are quoted separately.
Is Essential Eight work certification?
No. The Essential Eight Readiness Check is a practical readiness review. It is not formal certification, accreditation or a guarantee of compliance.
Do you provide legal or privacy law advice?
No. Lateral Cyber can identify cyber risk and practical actions, but legal, privacy law and compliance sign off need to come from suitably qualified advisers.
Do you provide 24/7 monitoring or emergency response?
No. Lateral Cyber can support logging setup, alert design and incident readiness, but does not operate a staffed 24/7 security operations centre or emergency digital-forensics service.
Can you create or maintain a business website?
Yes. Secure website development, configuration, forms, domains, maintenance and authorised website security review remain available as defined project work.