Step 1
Assessment
We find the gaps.
A Wi-Fi and network vulnerability scan, a walk-through of your physical office, and a review of who can access what.
Preventive cybersecurity · no IT department needed
Fix the boring security gaps before they cost you.
Small businesses are rarely broken into by sophisticated hackers. It’s a spoofed invoice, a reused password, a former employee who still has access. Kalterro closes those gaps in a couple of weekends — without you hiring IT.
One fixed price · No monthly contract · Nobody on call
- Fixed price
- Agreed in writing before any work starts.
- Fixed schedule
- Delivered over a couple of weekends.
- Fully insured
- Insurance in place for every project.
- Written authorization
- Nothing is tested without it.
The problem
Most breaches start with something boring.
Not a movie-style hack. An ordinary slip that nobody had time to close, because nobody in the business is paid to look for it. The good news: these gaps are well understood, and they’re fixable.
-
Spoofed invoice emails
Someone pretends to be your supplier or your boss, and a payment goes to the wrong account.
Closed byEmail anti-spoofingPhishing training -
Reused passwords
A password leaked from an unrelated website turns out to also open your email, your accounting and your bank.
Closed byPassword managerMFA everywhere -
Ex-employees who still have access
Nobody switched off the account, the shared login or the Wi-Fi password when they left.
Closed byAccess reviewOffboarding process -
Backups nobody has tried to restore
A backup only counts once you’ve restored from it. Many are never tested until the day they’re needed.
Closed byTested backupsDocumented restore
The package
One package. Three steps. One fixed price.
Everything is done as a project, on a schedule, over a couple of weekends. When it’s finished, it’s finished — there’s nothing to renew.
Step 2
Hardening
We close them.
Password manager, MFA on every account, email anti-spoofing, tested backups, automatic updates and a clean offboarding process.
Step 3
Training
We test your team, then teach them.
A simulated phishing email and phone call, followed by a plain-language session on how to spot and stop these attacks.
Fixed price · all three steps
[ price ]
One price, agreed before any work starts. No monthly fee, no on-call retainer and no contract after handover.
Start with the free checkWhat’s included
The full list, in plain language.
Every item below is part of the fixed price. No add-on menu.
Step 1 Assessment
- Wi-Fi and network vulnerability scanWe scan for known weaknesses, such as outdated equipment and settings an outsider could use.
- Physical office walk-throughWe look for what a visitor could see or reach: exposed routers, unlocked rooms, passwords on sticky notes.
- Access and posture reviewWhere MFA is missing, whether backups exist, and who can get into what.
Step 3 Training
- Simulated phishing emailA realistic fake email sent to your staff, so you see how your team responds before a real attacker finds out.
- Simulated phone call (vishing)A fake call to see whether someone will hand over information or access.
- Plain-language training sessionOne session, no jargon, on how to spot and stop these attacks.
Step 2 Hardening
- Password manager and usage policySet up for your team, with a short, plain policy on how to use it.
- MFA turned on everywhereA second step at login, on every account that supports it.
- Email anti-spoofing (SPF, DKIM, DMARC)Makes it much harder for anyone to send email pretending to be you.
- Tested backups with a documented restoreWe restore from them to prove they work, and write down exactly how.
- Automatic updatesDevices and software patch themselves, so fixes don’t wait on someone remembering.
- Clean employee-offboarding processA checklist so that when someone leaves, their access really does end.
Optional · booked in advance
Yearly tune-up: [ yearly price ]
A scheduled visit, not monitoring. We don’t watch your systems between visits.
- Annual re-assessment of your network, office and access
- A repeat phishing and vishing test
- A training refresh for your staff
Free · 20 minutes
See one real gap in your setup.
Kalterro will show you one real gap in your setup, at no cost.
- 20 minutes of your time.
- A real finding from your own business, not a generic checklist.
- No obligation, and nothing is tested without your written authorization.
Anyone can send email as your company
High- What we found
- Your domain doesn’t publish a DMARC policy, so a fake “invoice from the boss” looks identical to a real one.
- How it’s closed
- SPF, DKIM and DMARC records set up and checked, as part of the Hardening step.
An illustration, not a real client. Your check shows a real gap from your own setup.
Why Kalterro
A project you can plan around.
Security help usually comes as a monthly contract. This doesn’t. It’s scoped, scheduled and finished.
Fixed price
You know the cost before we start, and it covers the whole package.
Fixed schedule
The work is booked in advance and delivered over a couple of weekends.
Fully insured
Every project is covered by insurance.
Written authorization only
Scans, phishing tests and vishing calls happen only after you’ve authorized them in writing.
How it works
-
Free 20-minute exposure check
We show you one real gap. You decide what happens next.
-
One price, in writing
You get a fixed price and a written scope. Testing starts only once you’ve signed a written authorization.
-
Delivered over a couple of weekends
Assessment, hardening and training run to a schedule agreed in advance, so your business keeps running.
-
Handover, and you’re done
You keep the documentation. No monthly fee, nobody on call. Want a yearly tune-up? Book it in advance.
Honest about scope
Kalterro is
- A one-time project at a fixed price
- Focused on the common, preventable causes of breaches
- Delivered on a schedule you agree in advance
- Insured, with written authorization for all testing
Kalterro isn’t
- Managed IT or an outsourced IT department
- 24/7 monitoring or on-call support
- A monthly fee or an ongoing contract
- A promise that nothing can ever go wrong. Nobody can honestly offer that.
What you get instead: the common gaps closed, your team trained, and nothing to renew.
Contact
Book your free exposure check.
Get in touch by phone or email. We’ll find a 20-minute slot that suits you.
To make it quick, tell us:
- Your business name
- Roughly how many people work there
- The best time to reach you
- Phone
- [ phone ]
- [ email ]
- Service area
- [ service area / city ]