Fixila Shield
Coming soon
Find the holes before someone else does.
Shield checks your business from the outside in and the inside out, proves which weaknesses are real, and gives you a short, prioritized list of what to fix first. Then we check again to confirm it's fixed.
What Shield checks
From what anyone on the internet can see to the printer in your back office.
Attack surface mapping
Finds everything of yours that's exposed to the internet: websites, sign-in pages, remote access and forgotten servers.
Vulnerability scanning
Checks your computers, servers and network gear for known weaknesses and missing updates.
Web app and API testing
Tests your websites and apps for the most common flaws, using the OWASP Top 10, the industry's standard list of the most common web risks.
Cloud and Microsoft 365 settings
Reviews your cloud and Microsoft 365 settings against security best practices, such as sign-in rules, sharing and admin access.
Identity and password checks
Finds weak, reused or breached passwords and accounts with more access than they need.
Phishing and awareness
Sends safe, simulated phishing emails to test your team, then trains the people who clicked.
Automated validation (AI-assisted)
Runs safe, realistic attack simulations to prove what an attacker could actually reach. Every finding comes with proof, not just a scanner's guess.
Penetration testing
Human-led testing by Fixila's certified penetration tester, in-house, for compliance needs such as PCI, SOC 2 and HIPAA.
On-site assessment
During a site visit we check the things most tools miss.
Continuous monitoring and dark-web watch
Keeps checking between tests and alerts you if your company's passwords show up in a data breach.
Clear reporting
A prioritized "fix this first" report in your client portal, in plain English, with retests to confirm each fix.
Compliance coverage: SOC 2, HIPAA, PCI DSS, CIS Controls, CMMC and the Colorado Privacy Act. See compliance coverage
What each plan covers
Ongoing plans are priced per month for small businesses and enterprises; Pro and On-Site are one-time services.
| Ongoing plans | One-time services | |||
|---|---|---|---|---|
| Shield checks | MonitorSmall business $199/moEnterprise $499/mo | ValidateSmall business $499/moEnterprise $999/mo | ProFrom $3,500 per engagement | On-Site$499 per visit |
| Attack surface mapping | Included | Included | Not included | Not included |
| Vulnerability scanning | Included | Included | Not included | Not included |
| Web app and API testing | Included | Included | Not included | Not included |
| Cloud and Microsoft 365 settings | Included | Included | Not included | Not included |
| Identity and password checks | Included | Included | Not included | Not included |
| Phishing and awareness | Included | Included | Not included | Not included |
| Automated validation (AI-assisted) | Not included | Included | Not included | Not included |
| Penetration testing | Not included | Not included | Included | Not included |
| On-site assessment | Not included | Not included | Not included | Included |
| Continuous monitoring and dark-web watch | Included | Included | Not included | Not included |
| Clear reporting | Included | Included | Included | Included |
Shield Pro is a penetration test
A qualified human tester, in-house, tries to break in the way an attacker would, within the scope you approve. Prices start at:
- Penetration test, external: from $3,500
- Penetration test, internal: from $5,000
- Web application penetration test: from $3,500
Monitor and Validate are automated testing. They're not penetration tests, and we never call them that.
Getting started
Onboarding for Monitor and Validate: $499 for small business, $1,500 for enterprise.
Free when you choose annual billing.
Shield is coming soon; join the waitlist and we'll confirm your price. Testing only ever covers systems you own or are authorized to test, with your written permission.
The things most tools miss
Wi-Fi, smart devices and printers rarely get checked, yet they're common ways in. Shield On-Site looks at your Wi-Fi for weak encryption, rogue access points and guests who can reach your office network; at cameras, TVs and other smart (IoT) devices for default passwords and old software; and at printers and copiers, which often store passwords and scanned documents.
What Shield is
Shield finds and proves the weaknesses in your systems, shows you in plain English what to fix first, and checks again once it's fixed. The software plans (Monitor and Validate) are automated testing; when you need a penetration test for an audit, Shield Pro is led by Fixila's certified penetration tester.