Cyber-risk scans
Eleven areas of risk checked every 24 hours, one health score, and a fix guide for every finding.
See what is checked
Cyber-risk monitoring for small and mid-sized businesses
Know what attackers can see about your business, before they use it.
Cybernocs checks your business from the outside, scores your cyber health, and tells you exactly what to fix first. Then it gives you the incident plan and staff checklists to be ready for the rest.
- Set up in minutes
- Nothing to install, no access to give
- R899 a month, everything included
FROM A REAL SCAN
Ransomware intelligencePASSED
Data breach intelligencePASSED
Phishing and impersonationACTION REQUIRED
Vulnerability intelligenceNOT FULLY CHECKED
Fraud and social engineeringACTION REQUIRED
IN PLAIN WORDS
Fraud and social engineering: your domain does not publish a DMARC record, so forged email in your name, such as fake invoices, is delivered freely.
One subscription, three jobs
Find the risks. Be ready for them. Close the gaps.
Most tools stop at a list of problems. Cybernocs gives a small business the whole routine: see what is exposed, know exactly what to do when something goes wrong, and make sure nothing is left open when someone leaves.
Incident response plan
A written plan built from your own answers: who does what, who to phone, and the breach-reporting rules and deadlines that apply to you under South African, EU and UK law, plus your insurance and contracts.
See how the plan worksStaff exit checklists
Keys, devices, email, passwords and bank access, ticked off for every person who leaves, with a sign-off record.
See how exits work
Incident response plan
When something goes wrong, you already know what to do.
Most small businesses have no plan until the day they need one. Cybernocs writes yours from guided questions, so the first hour of a crisis is not spent guessing.
- Guided questions, each one explained in plain words.
- A written plan that fills in as you answer: who does what and who to phone.
- The breach-reporting rules and deadlines under South African, EU and UK law, plus your insurance and contract duties, set out clearly.
- Saved, numbered versions with a record of who approved each one.
- Practice exercises and an incident log that keeps the deadlines in front of you.
Have your own lawyer approve it before you rely on it. Included in the plan.
EXAMPLE PLAN
Incident response plan Version 3 ยท Approved
Who leadsManaging director
First phone callIT provider
ThenInsurer, attorney, Information Regulator
Deadline clockStarts when you confirm a breach
Last practisedLast quarter
Staff exits
Someone leaving can be one of your biggest security risks.
An employee on their way out, or one who has already gone, may still have logins, shared passwords and keys. They also know how your business works, who your clients are and where the money moves. It is easy to miss something, and nobody notices until it matters.
Access that never ended
Email, cloud accounts, shared passwords, bank access and keys that nobody removed.
Inside knowledge
Client lists, pricing, procedures and weak spots, in the head of someone no longer on your payroll.
No record it was done
When something goes wrong later, you cannot show that the exit was handled properly.
Cybernocs helps you close every exit, and keeps a record of what you did.
- A ready checklist for keys, devices, email, passwords and bank access.
- Extra steps added automatically for a dismissal or a contractor.
- Mark each check Done, Not relevant or Still open, over as many days as you need.
- Overdue warnings when the last working day has passed and checks remain.
- A printable sign-off sheet, so you can show afterwards what was done.
EXAMPLE CHECKLIST
Leaving: John Smith Last day: Friday
Office keys and access cardDONE
Laptop and phone returnedDONE
Email account closedSTILL OPEN
Shared passwords changedSTILL OPEN
Bank access removedNOT RELEVANT
Why Cybernocs
Attackers start by studying you from the outside. Now you can too.
Before an attack, criminals check what anyone can see: your website, your email setup, pages you forgot about, passwords left in public code, fake sites that look like yours. Cybernocs looks at all of it for you, regularly, and turns it into a short list of things to do.
Know where you stand
One health score out of 100 and a short list of what to fix first. No jargon and no wall of alerts.
Fix it in minutes, not meetings
Every finding comes with the steps, who normally does it, how long it takes, and a ready-made message you can forward to your IT person.
Always watching
Scans run automatically every 24 hours, and new serious findings appear on your Alerts page.
What we watch
Eleven areas of risk, one clear picture.
Every scan covers the places attackers look first, and shows you for each one whether it passed or needs action.
01
Credential exposure
Signs that your company's passwords or keys are sitting in public places, such as code on GitHub.
02
Ransomware
Whether criminal gangs have listed your business on their public leak sites.
03
Look-alike domains
Fake websites with names close to yours that could be used to trick your customers.
04
Your outside footprint
Websites and hostnames of yours that anyone can find, expiring certificates, forgotten pages and exposed files.
05
Known software flaws
Software your website advertises, checked against official lists of known flaws and end-of-life dates.
06
Data breaches
Whether your domain appears in public lists of breached companies.
07
Malware and botnets
Whether your addresses show up on lists of computers controlled by criminals.
08
Threat actors
Which criminal groups are most active, and official warnings relevant to your industry and the software your website shows.
09
Cloud and infrastructure
Forgotten cloud links that can be taken over, and test systems left open to the internet.
10
Your suppliers
Ransomware, breach and botnet signals about the suppliers you list. A supplier's problem can become yours.
11
Fraud and email forgery
Whether criminals can send email that looks like it comes from you, and how well your email is protected.
How it works
From your website address to a plan, in four steps.
Tell us who you are
Enter your company name and website, and prove you own the domain with one DNS record. Add your suppliers if you like.
We scan the public internet
We check public sources about your domains. We also make ordinary read-only requests to your own website. There is nothing to install, and we never log in or change anything.
You get a score and a list
See what passed, what needs action, and what to do first.
Fix it and track it
Follow the guides, mark findings as done, and watch the score improve over time.
Included too
Everything around the plan and the scans.
Know without having to look
New critical and high findings appear on your Alerts page and as a number in the sidebar until you mark them seen.
A report you can hand over
Print a clear report for your board, your clients or your insurer. It always matches your latest results.
Share it with your team
Invite colleagues as viewers, editors or owners, with two-step sign-in available.
Gentle by design
Nothing to install. Nothing to hand over.
Cybernocs works from the outside, using public information and ordinary read-only requests to your website. You give us no access and install no software, and we never log in or change anything.
What that means for you
- Up and running in minutes, not weeks.
- Light, read-only requests only. We never attack or try to break in.
- No logins or passwords to hand over, and we never show or store passwords.
- The kind of outside view an attacker starts with, without the attack.
Built for people who are not technical
- Every finding in plain language.
- Steps, who does them and how long they take.
- A ready-made message for your IT provider.
- Honest results: if a source is down, we tell you, so you can trust what you see.