Service
Vulnerability assessments: what an attacker could find, and a fix list in the right order.
Intragreat runs vulnerability assessments for companies that need to know where they’re exposed: a scan of what’s reachable from the internet, a scan of the office network and laptops, and a review of the Microsoft 365 settings attackers rely on. You get a short, prioritized list of what to fix, and we can fix it and re-scan to show the result.
Who It Is For
Practical support for growing businesses.
For companies facing a customer security review, an insurance renewal, or simply a question nobody can answer: what would an attacker find?
Problems Solved
What Is Included
Clear scope and plain-language documentation.
External scan of internet-facing systems
Internal scan of the office network and devices
Missing patches and outdated software across laptops
Microsoft 365 and Entra ID configuration review
A prioritized fix list in plain language
A re-scan after fixes, with a before-and-after summary
When You Need This
Signs it’s time to bring this in.
What we check
- From the outside: your public IP addresses and domains, for open ports, exposed admin pages and remote desktop, VPN and firewall versions with known flaws, and weak TLS.
- From the inside: the office network, servers, printers, and cameras, for missing patches, default passwords, and old protocols.
- On laptops: missing operating system and application updates, using Intune and Defender reporting where you have them.
- In Microsoft 365: legacy authentication, admin accounts without strong MFA, external sharing, and mail settings, measured against Secure Score.
A fix list you can act on
Scanners report everything at once. We sort it by what an attacker could actually use, starting with anything exposed to the internet and known to be exploited, and write each item as a fix with an owner. Most companies can close the top items in days.
Vulnerability assessment or penetration test?
A vulnerability assessment finds and ranks weaknesses. A penetration test goes further and tries to exploit them to show what an attacker could reach. We do vulnerability assessments. If a customer or auditor requires a penetration test, the assessment is a sensible first step: fix what’s found, then test, so the test report shows what’s left instead of the obvious.
Related Services
FAQ
Common questions.
What is a vulnerability assessment?
A structured search for weaknesses in your systems: missing patches, exposed services, weak settings, and known flaws in firewalls and software. It ends with a prioritized list of fixes.
How is it different from a penetration test?
A penetration test tries to exploit weaknesses to prove impact. A vulnerability assessment finds and ranks them. We do vulnerability assessments, and recommend fixing what they find before paying for a penetration test.
How often should we run one?
At least once a year, before a major customer review or insurance renewal, and whenever a widely exploited flaw affects something you run. Ongoing patch reporting through Intune and Defender fills the gaps between.
Will scanning disrupt our network?
We schedule scans, start gently, and avoid fragile devices. Most assessments cause no noticeable disruption.