Find the weak spots before attackers do.
Patching handles the updates you know about. Vulnerability scanning finds what's been missed: an out-of-date app, a risky setting, a service left exposed on your internet connection. On Secure+ we scan your managed devices and your internet-facing IP addresses and websites every month.
How it works
Scan
Every month, devices are scanned from the inside and your public IP addresses and websites from the outside.
Prioritise
Findings are ranked by risk, so the serious ones are dealt with first.
Fix
Where a patch or setting change fixes it, we do it.
Report
Anything we can't fix ourselves - for example on a system another supplier runs - comes to you with a clear recommendation.
Where it helps
Real situations this covers for businesses like yours.
A remote access port left open on the office router
The external scan finds it, and you know before an attacker does.
Software nobody remembers installing
An old, vulnerable app on a laptop shows up in the device scan.
Your website runs outdated software
The external scan flags it, and we pass a clear recommendation to whoever looks after your site.
A client's security questionnaire
'Do you scan for vulnerabilities?' Yes, every month, with results to show.
Which plans include it
Prices exclude VAT. Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price - we manage and right-size your licences. See full pricing.
Common questions
Is this a penetration test?+
No. A vulnerability scan is an automated check that runs every month. A penetration test is a one-off, manual attempt to break in, carried out by a specialist. Scanning is the regular health check.
Do you fix everything you find?+
We fix what we can through patching and configuration. Some findings, for example on a website or business app we don't manage, need that supplier, so we report them with a recommendation. Anything that isn't a quick fix (usually more than about 30 minutes of work) may be quoted as project work, and we'll always tell you before any charge.
Which websites and IP addresses do you scan?+
The websites and internet-facing IP addresses you confirm belong to your business. We scan them from the outside, the way an attacker would see them.
Is vulnerability scanning on other plans?+
No, it's on Secure+ only. Every plan includes managed patching, which closes most known weaknesses.
Does it help with Cyber Essentials?+
It helps you find and fix weaknesses before an assessment. Cyber Essentials certification itself is a separate service.
Works alongside
Want this looked after for you?
Free Microsoft 365 security audit - Cancel anytime in your first 3 months