I will audit your teams password security and credential hygiene
About this Gig
Password & credential security audit for small teams. Cybersecurity student, ISC2 certified, real red team experience. I check MFA, breach exposure, shared logins, and password habits, then give you a clear report and fix plan.
Most small businesses have no idea how their team actually handles passwords, until it becomes a real problem. Shared logins, reused passwords, no MFA, credentials sitting in a spreadsheet.
I'm a cybersecurity student with red team internship experience at Securely Innovations and database security experience at Payactiv, holding the ISC2 Certified in Cybersecurity credential.
What I check: how your team manages passwords, shared accounts, reused credentials, and storage methods. Whether MFA is enabled on your key platforms, email, admin panels, file sharing. Whether any email addresses tied to your domain have appeared in public data breaches. Whether you have a clear password policy at all.
What you get: a written report with findings ranked by risk, high, medium, low, plain language explanations, and a practical rollout plan with specific fixes, including recommended tools like password managers.
My Portfolio
FAQ
Will you need my actual passwords?
No, never. This is a policy and practice review, I check whether MFA is enabled, whether accounts show up in breach databases, and how your team handles credentials, not the passwords themselves.
How do you check for breached credentials?
I use Have I Been Pwned, a well known, free public breach database, to check if email addresses tied to your domain have appeared in known data leaks.
Do I need to give you admin access to my systems?
Not necessarily, a screen share walkthrough of your settings works for most checks. If deeper access is needed for a specific platform, we'll discuss that before starting.
What if you find something urgent?
I'll flag anything high risk, like reused admin credentials or missing MFA on critical accounts, right at the top of the report so you can act immediately.
Can you help us actually implement the fixes, not just report them?
The Premium package includes a rollout plan and a walkthrough call. If you need hands-on implementation support beyond that, message me to scope it separately.

