Vulnerability assessments
External network, basic web application and internal network assessments review agreed systems for potential weaknesses. Receive reviewed findings and practical recommendations.
Explore vulnerability assessmentsIndependent assessmentWindsor · Ontario
Independent security assessments · Ontario
Make security risks
easier to see.
Lucerna Security provides scoped vulnerability assessments and selected cloud configuration reviews for Ontario professional-services firms. Understand what was assessed, what was found, and which fixes to prioritize.
Services
A clearer view of what needs attention.
Lucerna provides scheduled, scoped assessments for professional-services firms. The work is designed to complement your existing IT support and give decision-makers and technical contacts a useful account of what was reviewed.
See an illustrative report extract
Entirely synthetic · Scope → observation → priority
Cloud configuration reviews
Selected Microsoft 365 and Google Workspace baseline reviews can stand alone or accompany a network assessment. Additional SaaS settings are reviewed only when specifically agreed.
Explore cloud configuration reviewsApproach
A defined scope. A usable result.
An independent review helps bring overlooked weaknesses into view while leaving day-to-day IT work with the people who know your environment.
Learn about Lucerna’s approach- 01Agree on the work
Discuss fit, identify the systems and review type, and obtain written agreement and authorization before technical assessment.
- 02Assess the agreed scope
Carry out the scheduled review and examine potential findings before reporting them.
- 03Make the findings useful
Explain what was observed, why it matters, what remains outside the review, and which actions deserve priority.
- 04Discuss next steps
Provide limited post-report guidance as agreed, often alongside the client’s own IT contact.
Deliverables
Clear enough to decide. Detailed enough to act.
The final report brings the assessment components together and separates observed findings from questionnaire-based context.
One observation. A useful next step.
Illustrative report extract · entirely syntheticOne public-facing portal
This example covers an authorized external check of one web service. It does not describe internal systems, account access, or authenticated application behavior.
Synthetic target: portal.example.org:443An older encryption protocol was accepted
In this example, the service accepted a TLS 1.0 connection. TLS 1.0 is deprecated; its availability is worth addressing. This observation does not show that data was intercepted or that the application was fully tested.
Synthetic evidence: TLS 1.0 handshake accepted on the agreed targetIllustrative priority: Planned remediation
Why this priority: A deprecated protocol is available on a public-facing service, so the setting deserves correction. In this synthetic example, plan the change after any confirmed findings requiring immediate action. This priority assumes no additional evidence that makes the observation urgent; accepting a connection alone does not establish compromise or interception.
Recommended next step: Ask the IT provider to check whether legitimate users still depend on TLS 1.0, then disable it where feasible and verify the change. The business impact, dependencies and further evidence could change this priority in a real assessment.
Start with the question you have.
Book an introductory call to discuss your needs and find a suitable assessment. If you already know what you want reviewed, send an inquiry outlining your systems and requirements. Scope and pricing are determined after Lucerna understands your needs.