Security assessments in plain English
Most security advice is either terrifying or incomprehensible. Safe2Scroll does something simpler: a careful look at what's really out there about you or your business, written so you can understand it, with a short list of things worth fixing first.
I never need your passwords. Not once, not at any point. Every assessment works from information that's already publicly available, plus whatever you choose to tell me in conversation.
You know you've been online for twenty years. You don't know what's accumulated — which old accounts are still out there, which breaches caught you, what a stranger could piece together from a search.
I go looking, properly, using the same open-source research methods an attacker would. Then I write up what I found and what to do about it, ordered by what actually matters.
You have somewhere between one and twenty people, no IT department, and a nagging sense that something's probably wrong. You're not wrong — but it's likely fixable, and cheaper than you think.
I examine your public-facing setup, talk through how your business actually runs, and hand you a report that names every gap in language you can act on or forward to a vendor.
I don't sell software, take referral fees, or offer to fix what I find. That means I have no reason to inflate a problem — and no reason to stay quiet about one.
Every finding is written so a non-technical person can understand it, judge how much it matters, and know exactly what the next step is. If I can't explain it clearly, it doesn't go in the report.
An automated scan gives you four hundred items and no priorities. You get the findings that matter, ranked, with the top few called out so you know where to start on a Tuesday afternoon.
Each finding traces back to something I verified myself or something you told me — and the report says which. No padding, no guesses dressed up as facts.
I don't log into your accounts, install anything, or ask you to run scripts. Assessments are built from public information and conversation. There's nothing for you to hand over.
This isn't a dashboard with a privacy score. A certified incident responder does the research and writes the report, and then sits down with you to walk through it.
Same four steps either way. Most engagements run about two weeks start to finish.
Tell me a little about your situation. I'll confirm whether this is a good fit and send an agreement that lays out the scope, the price, and exactly how I handle your information.
Fifteen minutes, no technical knowledge required. "I don't know" is a perfectly good answer to anything — and it's useful information in its own right.
I work through what's publicly available about you or your business, verify what I can, and note what I can't. For businesses, this includes a conversation about how things actually run day to day.
A written report with every finding explained and prioritized, followed by a call where we go through it together and agree on the first few things to tackle.
One price, agreed before anything starts. No hourly meter, no scope creep, no quote-on-request.
For one person
$249 one-time
Up to 3 adults at one address
$449 one-time
1–20 people, no IT team
$995 one-time
The walkthrough isn't an upsell — it's part of every engagement. A report you don't understand isn't worth anything, and the half hour where someone answers your questions is usually the part people remember.
Free, every other week
A short newsletter with one concrete, do-it-this-week security step explained in plain language. No fear-mongering, no product pitches, nothing you need a degree to follow.
Unsubscribe any time. I don't share or sell your address — it would be a strange look.
Tell me a bit about your situation and I'll tell you honestly — including if the answer is that you don't need to pay me anything.