Skip to main content
Independent security visibility for business owners

Know whether the protections your business relies on are actually working.

SunTzu Cybersecurity Labs provides authorized, non-destructive external assessments that turn technical exposure into clear business decisions.

  • Authorization first
  • Non-destructive testing
  • Reviewed reports

SunTzu follows the concept of improvement through observation and action. You choose the areas of concern and complete a baseline scan. After you have completed your baseline scan, you will be offered the options for Continuous Monitoring and remediation. We are here to help! You can contact us directly for questions, remediation or any other IT related issues you would like to discuss.

Free Website Security Diagnostic

What is your website telling the Internet?

A quick look at your website, email protections, and public information—so you know where a closer look may be worthwhile.

Explore the free diagnostic
A simple first check

Start with business email impersonation risk.

The $99 Business Email Security Check is a limited-time offer for a focused, secure, prioritized report. Broader assessments remain available when you need them.

Limited-time offer01

Business Email Security Check

A focused external check of the controls that help stop criminals from impersonating your business by email.

$99Limited-time price
04

External Exposure & TLS Review

A focused review of public TCP services and transport security on one specifically authorized target; it is not an application vulnerability scan.

$149
Assessment bundle

Advanced Website + Email Trust Bundle

One coordinated assessment establishes a website and email-security baseline for the same approved organization. You receive one report with Website Security and Email Trust sections.

$499 one time

After the combined baseline is completed and accepted, Complete Security Monitoring is a separate $109/month subscription.

Why an independent assessment?

Clear evidence without replacing your IT team.

Independent perspective

See your public-facing security the way a customer, insurer, or attacker can see it.

Signal, not scanner noise

Findings are reviewed, explained in plain language, and ordered by practical importance.

A measurable baseline

Establish where you are today, then track meaningful changes through continuous monitoring.

“Know the enemy and know yourself.”— Sun Tzu
MSPs and service providers

Ordering on behalf of a client?

We value the opportunity to work with Managed Service Providers (MSP). Select the MSP relationship during onboarding, identify the target organization, and complete a target-specific authorization. Once approved as an MSP you can order scans against your client domains.

See the MSP path

Questions about your report—or another technology issue?

We can explain the findings, help prioritize your next steps, or discuss other technology challenges affecting your business. You do not need to know where to start.

Ask SunTzu for help

Asking a question does not commit you to paid work. Any proposed scope and cost will be explained first.

Keep track of changes after your assessment.

An assessment reflects the evidence collected at that time. We recommend ongoing monitoring and scheduled reassessments to identify meaningful changes and verify agreed fixes.

Discuss ongoing monitoring

We will help define the assets, checks, schedule and notification process that fit your needs.