A fast check of your real infrastructure risk.
Eight questions. No logins, no scans, no data collected — a screening tool to establish whether a full IT audit is worth doing.
Eight honest questions. Unmarked answers score as “No / unsure”. This is a screening tool, not an audit — a full audit verifies each area in the real environment.
Are your critical files and databases backed up automatically?
A backup that isn't automatic is a backup that gets forgotten.
Have you ever actually tested restoring from those backups?
Untested backups are hope, not strategy.
If the main internet link fails, does anything keep you online?
Single uplink means downtime is one outage away.
Are admin and default credentials unique, and software kept patched?
Default credentials and unpatched systems are how breaches start.
Can you list who has access to what — and is it re-checked?
Access that isn't reviewed includes ex-staff and forgotten accounts.
Are failures detected by monitoring systems, not by staff noticing?
Monitoring is the difference between 5 minutes and 5 hours of downtime.
Are your hosting and cloud costs reviewed — and do you know what's running?
Orphaned resources and over-provisioning silently raise bills.
Could you quantify what one hour of downtime costs your organisation?
That number decides how seriously to take every other answer.
Based in Nairobi, Kenya. No data leaves your browser until you send it.
What the full audit covers.
This tool screens the common areas. The full audit verifies them in your environment and returns a prioritized remediation plan.
This is a screening tool, not an audit. It gives you a fast signal and ranks the most common risk areas — but a real audit verifies backups, restores, networking, access control and monitoring in the actual environment.
A health score, a band rating, and a clear next-step recommendation. If the health is exposed, that's the strongest signal a full audit will find urgent fixes.
No — answers are processed in your browser and only leave your device if you send the summary via WhatsApp or the contact form.
The health check is a starting point, not a finish.
The full audit finds what this tool can only suggest — and produces a prioritized remediation plan you can act on.
or email joseph.gitau.c@gmail.com