Technology investigation
Tools, costs, licensing and what is exposed without you noticing: we investigate your company's technology, technically and legally, and tell you what to fix first. Fixed price, agreed before we start.
Who it's for
- →An inventory of the tools in use and what each one costs
- →Tools and spreadsheets propping up the operation without management knowing
- →Duplicate costs, underused subscriptions and contracts coming up for renewal
- →Critical suppliers with nothing in writing — and what breaks if they disappear
- →Access keys and internal documents publicly exposed
- →Licensing, GDPR and contractual dependencies
Process
Perimeter
We put in writing what is in scope and what is out, with your written authorisation for the sweep.
Fieldwork
Interviews with the owner and the team, a documentary review of critical suppliers, and a passive sweep of public exposure.
Report
Tools, costs, risks and legal issues, with recommendations in priority order.
Decision
We present the report in a meeting. From there, two paths, each with its own scope and price: carrying out the changes is a project; keeping watch is the Perito.
Frequently asked questions.
What is the Technology investigation, and what do I get at the end?+
A survey of your company's tools, processes, suppliers and risks. At the end you get a report with the inventory — vulnerabilities, costs and legal issues, licensing and GDPR included — and the recommendations in priority order. The report is presented in a meeting, not just sent over.
What does it cost and what is included?+
A fixed price, agreed before we start. There are three levels, in order of depth: Indício, Investigação and Dossiê. What each one includes — and the limits of the perimeter — is written down before you sign. If the real perimeter goes beyond them, we revisit the scope and issue a new quote; there are no hidden hours.
How do you investigate what is exposed — and is that legal?+
Only with passive techniques and with your written authorisation: we observe what is publicly accessible and never test a credential we find. Findings involving your suppliers or partners are reported to you first, and the way to approach the third party is decided by our lawyer.
And after the report?+
There are two paths, each with its own scope and price. Carrying out the changes is a project: every recommendation you accept becomes a plan with dates, an owner and a completion criterion — and your own IT provider can execute it, with our guidance. Keeping watch is the Perito: a check-in on a fixed cadence, the alerts from the perimeter we have already mapped, and a risk and compliance bulletin. It has a written cap on hours — it is not unlimited availability.