Loading…
12
PSA: paid $120 for a password manager audit, got back a 4 page printout of things I already knew
Last month my small business got a notice from one of our vendors about a data breach. Nothing huge, but it got me nervous about our login setup. So I hired this consultant who advertised a full password and account audit. She came highly rated on a local business forum.
She charged $120 and spent about 90 minutes on a Zoom call going through our accounts. The final report was basically: we reuse passwords, some people still use the same one from 2019, and we don't have two factor turned on for the email admin. All stuff I could have written myself if I'd spent an afternoon checking. She also pointed out one old employee account that was still active, which I will admit was useful. But the rest felt like she just skimmed a checklist.
What really got me is she didn't give me any actual steps to fix it. Just a red flag list with no action plan. I had to go watch a YouTube video on setting up a password manager properly.
Has anyone else paid for a security audit or similar service and gotten mostly fluff? What did you actually find worth the money? I'd rather use that cash for a real tool next time.
0 comments
Log in to join the discussion
Log In0 Comments
No comments yet
Be the first to share your thoughts on this discussion.