Skip to main content
A simple, defensible process

From curiosity to a reviewed report.

The client experience stays simple while authorization, payment, approval, and audit evidence remain separate behind the scenes. Once you have established a baseline scan, we can track changes in your security posture over time.

1

Create your account

Enter your email address, verify it, and sign in securely.

Usually 2 minutes
2

Choose who you represent

Select your own organization or a client of your MSP or service company. Then choose a service and enter the assessment target.

3

Review and sign the authorization

Confirm the exact target, permitted non-destructive methods, boundaries, and authorization period.

4

Pay and submit for review

Complete secure checkout. SunTzu reviews the request, authorization, relationship information, and target before scheduling the work.

5

Assessment and report

The assessment runs within the authorized boundary. Findings are reviewed and delivered in a clear report with prioritized next steps. This establishes a baseline we can use to track the improvement of your security posture over time.

6

Continuous Monitoring

Once your baseline is established, recurring checks can reveal new exposures and changes in publicly visible security signals. Comparing those changes with the baseline helps you prioritize follow-up and track whether improvements hold over time.

Ready to establish your baseline?

Choose the assessment that fits your organization. MSPs can identify a client target during the same process.

Get Started

Questions about your report—or another technology issue?

We can explain the findings, help prioritize your next steps, or discuss other technology challenges affecting your business. You do not need to know where to start.

Ask SunTzu for help

Asking a question does not commit you to paid work. Any proposed scope and cost will be explained first.

Keep track of changes after your assessment.

An assessment reflects the evidence collected at that time. We recommend ongoing monitoring and scheduled reassessments to identify meaningful changes and verify agreed fixes.

Discuss ongoing monitoring

We will help define the assets, checks, schedule and notification process that fit your needs.