Independent assessment. Clear expectations.
Lucerna Security is an early-stage, independently operated security consultancy in Windsor, Ontario. It provides scoped vulnerability assessments and selected cloud configuration reviews for professional-services businesses across Ontario.
You work directly with the person carrying out your assessment, from the initial discussion through reporting and agreed follow-up.
hello@lucernasecurity.comLucerna takes its name from the Latin word for a lamp or light. That idea shapes the work: discover, explain and prioritize.
How an assessment worksA second perspective on working systems.
Systems can be working as expected while security weaknesses remain unnoticed. A focused assessment gives an owner and an IT contact another view of agreed systems, with findings and practical priorities.
Lucerna complements the people who manage your IT. The assessment is a defined piece of work alongside their day-to-day responsibilities.
- Lucerna’s role
- Assess the authorized scope, review potential findings and explain practical recommendations. Provide limited post-report guidance as agreed.
- Your IT staff or provider
- Continue managing the environment. They may help arrange access, plan changes and carry out fixes using the report’s findings and recommendations.
How the work fits together.
Begin with a call in everyday language, or send an inquiry if you can describe the review you need. Scope and pricing are determined after Lucerna understands your requirements.
Agree on the question and scope
Understand your requirements, identify the systems and review type, and agree the scope, price and schedule. Written agreement and authorization come before technical assessment work.
Assess what was agreed
Carry out the scheduled review within the authorized scope. Questionnaire responses and relevant public information add context; selected network, basic web or cloud checks depend on the agreed service.
Review and explain the findings
Examine potential issues before reporting them. Explain what was observed, which information came from the questionnaire, what remains outside the review and which practical actions deserve priority.
Discuss the next steps
Provide limited explanation and prioritization as agreed, often with your IT contact. Quarterly reassessments can be purchased and scheduled separately; they repeat the agreed work without continuous monitoring between reviews.
Clear about the work and its limits.
Vulnerability assessments
External network, basic web application and internal network assessments are scoped around your needs, with reviewed findings, reporting and limited guidance.
Explore vulnerability assessmentsCloud configuration reviews
Selected Microsoft 365 and Google Workspace baseline reviews, plus limited manual settings reviews for specifically agreed SaaS applications. Available alone or alongside a network assessment.
Explore cloud configuration reviews
Outside the current scope
Full penetration testing, red teaming and phishing campaigns are not current services. Lucerna does not provide emergency incident response, 24/7 support, ongoing IT management or continuous monitoring.
A scoped assessment cannot guarantee discovery of every weakness or prevent every incident. Basic web scanning is not a full application penetration test; a selected cloud baseline review does not cover every platform feature.
Reporting and limited explanation are included as agreed. Unlimited remediation work is not part of the assessment.
A small, focused practice
Work is accepted within available capacity. Scope, availability and realistic follow-up are discussed before an engagement is agreed.
Start with what you want to understand.
Book an introductory call to discuss your needs and find a suitable review. If you already know what you want assessed, send an inquiry with your requirements. Lucerna may clarify the scope before preparing a proposal.