Assessment · Computers and devices
Know which business computers are protected and which are not
A device-by-device review of endpoint protection, updates, disk encryption, administrator rights and operating system support. You receive an inventory with protection status, a severity-rated gap list and a recommended security baseline.
Proposed price
$499.00one-time fee
- SKU
- PC-ASSESS-ENDPOINT-004
- Billing
- one-time fee
Proposed pricing pending approval. Your final price is confirmed in a written quotation.
At a glance
- Product ID / SKU
- endpoint-security-assessment / PC-ASSESS-ENDPOINT-004
- Pricing basis
- Proposed fixed fee of CAD 499 for up to about 100 endpoints, before tax; confirmed in a written quotation and pending business approval
- Billing frequency
- One-time
- Delivery method
- Remote, using your existing management console or a temporary read-only discovery agent; typically one to two weeks
- Purchase mode
- Checkout now once price and terms are approved; until then, request it from the store and we confirm by written quotation
- Eligibility
- Windows and macOS computers and servers; mobile devices included where enrolled in Intune or another management tool
- Not included
- Remediation, malware cleanup, incident response and forensic investigation
Why endpoints deserve their own assessment
Laptops and desktops are where staff open attachments, click links and store files offline, which makes them the most common entry point for ransomware in small organizations. Yet many businesses cannot answer basic questions: Is every computer running endpoint protection? Which ones are months behind on updates? Are laptops encrypted if one is left in a car? Who has local administrator rights?
The Endpoint Security Assessment answers those questions device by device. We collect status from whatever management tools you already have, or from a temporary discovery agent when you have none, then compare each device against a practical security baseline for a business of your size. The output tells you exactly which machines need attention first.
What you get
Endpoint inventory
Every discovered device with its operating system version, last update date, protection agent, encryption status and assigned user where known.
Severity-rated gap list
Missing protection, unsupported operating systems, unencrypted disks and excessive admin rights, each rated Critical, High, Medium or Low.
Recommended baseline
A short written standard for protection, update cadence, encryption and admin rights that your devices should meet.
Readout meeting
A walkthrough of the most urgent devices and the steps needed to bring the fleet up to the baseline.
What is checked
Checked on each reachable device
- Presence, version and health of antivirus or endpoint detection and response agents
- Operating system version and end-of-support status
- Patch level and time since the last successful update
- BitLocker or FileVault disk encryption status
- Local administrator accounts and users with elevated rights
- Host firewall status and Intune or management-tool compliance state where available
- Devices seen in Microsoft 365 sign-ins but missing from management
Outside this assessment
- Removing malware or responding to an active incident
- Forensic analysis of individual devices
- Deploying or replacing endpoint protection products
- Network, firewall and server application review
- Personal devices that are not enrolled or managed
Prerequisites
- Read-only access to your existing endpoint or device management console, if you have one
- Otherwise, approval to deploy a temporary discovery agent, which is removed at the end of the assessment
- Devices powered on and connected to the internet at least once during the collection window
- A staff list so devices can be matched to users
Eligibility
Included in the proposed price
Up to about 100 Windows or macOS computers and servers in one organization.
Quoted separately
Larger fleets, devices spread across several unrelated management tools, or Linux servers.
Mobile devices
Phones and tablets are included when they are already enrolled in Intune or another management tool; unmanaged phones cannot be assessed.
Pricing basis
The proposed fixed fee is CAD 499 before tax for up to about 100 endpoints, pending business approval and confirmed in a written quotation. No options are selected at purchase.
Once the gaps are known, you can choose Managed Endpoint Security, which keeps every covered device at the baseline each month at a proposed per-device price. You can estimate that cost with the Endpoint Security Pricing Calculator.
Delivery steps
A typical engagement takes one to two weeks; timing depends on how quickly devices check in.
Kickoff
We confirm device counts, management tools and the staff list.
Collection window
We read status from your console or deploy the discovery agent and collect data for several business days so laptops that travel are captured.
Analysis
Each device is compared to the baseline and gaps are rated.
Readout and cleanup
We present the results and remove any temporary agent.
Terms
Price, scope and terms are drafts pending business and legal approval and are shown in full before checkout. Devices that do not connect during the collection window are listed as unassessed. The assessment is a point-in-time snapshot and does not detect or remove existing compromises. Taxes are calculated at checkout.
Frequently asked questions
Do we need to have Intune or Defender already?
No. If you have no management tool, we use a temporary read-only discovery agent and remove it at the end.
Will staff notice anything?
Normally not. The discovery agent runs quietly and does not restart devices or change settings.
What happens to devices that are offline?
They are listed as unassessed in the report. We can rerun collection for them if they come online shortly after.
Can you remove the problems you find?
Yes, as a separate project, or ongoing through Managed Endpoint Security for each covered device.
Find the unprotected computers before an attacker does
Request the assessment from the security store, or estimate ongoing device protection with the calculator.