Skip to main content
Independent security visibility for business owners

Know whether the protections your business relies on are actually working.

SunTzu Cybersecurity Labs provides authorized, non-destructive external assessments that turn technical exposure into clear business decisions.

  • Authorization first
  • Non-destructive testing
  • Reviewed reports
Free Website Security Diagnostic

What is your website telling the Internet?

A quick look at your website, email protections, and public information—so you know where a closer look may be worthwhile.

Explore the free diagnostic
A simple first check

Start with business email impersonation risk.

The $29 Business Email Security Check is the quickest way to get a secure, prioritized report. Broader assessments remain available when you need them.

Best first step01

Business Email Security Check

A focused, passive check of the controls that help stop criminals from impersonating your business by email.

$29See what is included
02

Basic External Website Security Scan

A focused, externally observable review of one authorized public website.

$149Start this assessment
03

Advanced External Website Security Scan

A deeper authorized assessment for a modern public website or web application.

$399Start this assessment
04

Email Trust & Impersonation Review

An externally observable review of email authentication, trust, and impersonation resistance.

$149Start this assessment
Why an independent assessment?

Clear evidence without replacing your IT team.

Independent perspective

See your public-facing security the way a customer, insurer, or attacker can see it.

Signal, not scanner noise

Findings are reviewed, explained in plain language, and ordered by practical importance.

A measurable baseline

Establish where you are today, then track meaningful changes through continuous monitoring.

“Know the enemy and know yourself.”— Sun Tzu
MSPs and service providers

Ordering on behalf of a client?

Select the MSP relationship during onboarding, identify the target organization, and complete a target-specific authorization.

See the MSP path

Questions about your report—or another technology issue?

We can explain the findings, help prioritize your next steps, or discuss other technology challenges affecting your business. You do not need to know where to start.

Ask SunTzu for help

Asking a question does not commit you to paid work. Any proposed scope and cost will be explained first.

Keep track of changes after your assessment.

An assessment reflects the evidence collected at that time. We recommend ongoing monitoring and scheduled reassessments to identify meaningful changes and verify agreed fixes.

Discuss ongoing monitoring

We will help define the assets, checks, schedule and notification process that fit your needs.