Understand the current process
Talk through a recent prioritisation decision, what worked, what remains unresolved and who would use the output.
Independent exposure assessment
You have the findings.
What happens next?
For IT and security leaders who need to connect asset records, tool evidence and ownership to a clear set of remediation decisions.
See the decision handoff01 / THE WORK BETWEEN THE TOOLS
Make the gaps
explicit.
An asset appears in one register, under another name in a tool, and without an agreed owner in the work queue.
When that happens, another report can leave the same decision unresolved. Exposure Desk reconciles the agreed records, explains the uncertainty and proposes a bounded handoff your team can review.
The first question is whether this gap exists in your current process. If your tools or provider already handle it well, we will recognise that.
FOR MSPs AND MSSPs
Specialist analysis for your managed-service clients.
When a recent client request leaves a specific evidence, prioritisation or delivery-capacity gap, consider a scoped specialist assessment alongside your existing service.
Prepare the first discussion- Your client discussion
- Establish the actual need, coordinate the agreed evidence and define who will use the handoff. We recognise what your existing tools and team already handle well.
- The specialist work
- Exposure Desk reconciles the selected asset/security evidence, records coverage and ownership uncertainty, and supplies traceable proposed remediation decisions.
- A bounded paid pilot
- Start with one actual client and an agreed decision, scope, commercial route and completion conditions. Implementation and retesting are separately agreed work.
Co-branded resale is the proposed starting arrangement. Wholesale and retail fees, branding, client authority, data responsibilities and payment terms require agreement. Referral and white-label options can be assessed separately.
02 / FOLLOW ONE RECORD
A useful output
shows its workings.
Illustrative example only.
No client data or measured outcome.
APP-01 / agreed inventory recordSYNTHETIC
InventoryAPP-01 · application service · owner recorded as IT Operations
Security exportapp01.example.invalid · similar identifier · incomplete authentication field
The supplied records suggest a possible match. The evidence does not yet establish the identity or effective assessment coverage.
IdentityPossible match; confirmation required.
CoveragePresence in an export does not establish the depth or recency of assessment.
The handoff preserves the source and the unresolved question, so an assumption does not quietly become a fact.
Proposed ownerIT Operations, subject to client confirmation.
DecisionConfirm the identity, validate assessment evidence and agree the next collection or remediation step.
Record the evidence reference, decision and owner. Implementation and retesting are separately agreed work.
03 / THE EXPOSURE BASELINE
A defined assessment.
A traceable handoff.
Independent analysis of an agreed part of your environment, built around the evidence and decision your team actually needs.
£3,100plus VAT if applicable
Founding fee for the defined offer. Selected scope and dependencies are agreed before booking.
01
Reconciled evidence
A controlled report and workbook connecting the agreed asset and security records.
02
Explicit uncertainty
Coverage and ownership gaps, evidence limitations and the questions that still need answers.
03
Proposed campaign records
Bounded remediation decisions with evidence and proposed ownership for your review.
04
A working handoff
Editable ledgers, one findings meeting and one factual correction round in an agreed window.
What can the founding scope include?
Ceilings: one primary registrable domain; up to 25 approved external endpoints; up to 256 authorised internal IPs from one vantage and collection window; one named cloud account, subscription or project with selected services; up to three agreed source formats; 500 scoped distinct entities; and up to five campaign cards.
These are limits, not automatic inclusion of every boundary. The final selection must fit the agreed work and effort estimate. Dates follow evidence readiness, authority and availability. Implementation, retesting, monitoring, exploitation and certification are separate.
04 / HOW IT WORKS
Start with the decision.
Set the boundary
Confirm the evidence, outputs, buying route, permissions, price and completion conditions.
Review the evidence and actions
Work through the report and editable records. Confirm factual corrections and proposed ownership.
05 / YOUR FIRST CONVERSATION
Bring a recent example.
A useful first discussion starts with how you work today. You do not need to send technical exports, credentials or confidential findings.
Practitioner-led by Luke de Charmoy, drawing on vulnerability management and threat intelligence experience. Exposure Desk is a new service; illustrative output is labelled clearly.
We will discuss
- How you last decided which security findings to act on.
- What your tools and provider already do well.
- What, if anything, is still unresolved.
- Who would act on a clearer evidence handoff.
Enquiries are not open in this launch preview. The confirmed business inbox or booking link will appear here.