SageDynamics

Know where your business is exposed.
Know what to fix first.

We check the website, apps and IT your business runs on, then give you a ranked list of what to fix and who should fix it. AI does part of the analysis, and a person checks every finding before it reaches you.

Fixed prices from USD 1,250. You’ll know the full cost before we start.

Book a call with Bernd (opens in a new tab) Or tell us what you’d like checked

A 30-minute video call about which audit fits, if any.

Led by Bernd-Michael Rennebeck

OpenAI Select Partner · Based in the Philippines

What a finding looks like

High · Customer portal

Three former staff still have admin access.

Their accounts weren’t switched off when they left. Each account can view and change customer orders.

Fix
Switch off the three accounts, then add account removal to your offboarding checklist.
Who fixes it
Your IT provider

Checked by a person, with login records as evidence

Made-up example. Your report covers the systems you choose.

Is this for
your business?

The audits suit Philippine businesses that depend on a website, app, customer portal or office IT.

Good reasons to check now

  • A customer has asked how you protect their data, and you want evidence before you answer.
  • You’ve launched a new app or portal, or made big changes to one.
  • Your developer or IT provider has changed, and nobody is sure who still has access.
  • Backups run every night, but nobody has tried restoring one.
  • The PHP notice above applies to you, and you want to check more than the patch.

If you think someone is in your systems right now, you need incident response first. These audits don’t include it.

Choose how far
you need to look.

Start with the website or app you depend on most, or check the IT around it as well. Both audits end with a results meeting and a fix plan your team can work from.

Cyber Exposure Audit

A close look at the one website or app your business depends on most.

USD 1,250 one-time fee

Results in 5–7 business days once we have access

Book a call about this audit (opens in a new tab)

What we check

  • One website or web app, and the code behind it
  • Who can log in, and what each type of user can reach
  • The outside software it relies on, and how it’s set up
  • What anyone on the internet can see of it

What you get

  • Confirmed problems, ranked by how serious they are, with the evidence
  • A 30-day fix plan, and a record of what we checked and what we couldn’t
  • A meeting to walk your team through the results
  • A re-check of fixes for up to five findings, within 30 days
Technical scope for your IT team
  • Application: one, with its supporting API
  • Public exposure: one root domain, up to five listed targets
  • Code: one repository, up to 75,000 authored lines
  • Testing depth: up to five workflows, 20 selected endpoints and three user roles
  • Re-check: up to five original findings, four analyst hours
  • Company: one legal entity

Comprehensive IT & Cyber Audit

A wider look at your security, your backups and how your IT is run.

From USD 4,750 for up to 100 staff accounts; larger companies quoted

Results in 15–20 business days once we have access

Book a call about this audit (opens in a new tab)

What we check

  • Staff logins for up to 100 people, plus your Microsoft 365 or Google Workspace and one cloud account
  • Two business apps and a sample of 20 company laptops and devices
  • Whether your backups would get you running again
  • How ready you are for an incident, and which suppliers your IT depends on
  • How your systems fit together, how support and changes are handled, and selected IT costs

What you get

  • A summary for leadership, and detailed findings for your IT team
  • A map of your systems and how they connect
  • A 90-day plan with rough budget ranges
  • A results meeting, a re-check of fixes for up to ten findings, and a 45-minute progress check-in
Technical scope for your IT team
  • Identity and cloud: up to 100 workforce identities, one productivity tenant, one cloud account
  • Systems: two applications, ten critical workloads, a sample of 20 managed endpoints
  • Code and testing depth: two repositories (up to 150,000 authored lines combined), ten workflows, 30 selected endpoints, ten public targets
  • Suppliers and costs: ten SaaS entries, five vendors, five critical integrations, selected invoices, licenses and renewals
  • Extra deliverable: evidence matrix
  • Re-check: up to ten original findings, eight analyst hours
  • Company: one legal entity, two offices reviewed remotely

Your proposal names the assets and samples before work starts.

Prices are for one company, plus applicable taxes.

Bernd-Michael Rennebeck

Who you’ll work with.

Bernd-Michael Rennebeck leads each audit. His two decades in business and technology include COO/CTO experience at August 99 and platform delivery at Agent Image. Every report is written for two readers: the owner deciding what to spend, and the IT team making the changes.

OpenAI Select Partner

SageDynamics is an OpenAI Select Partner within the OpenAI Partner Network. The network gives our team training and support for building and delivering AI work with OpenAI, and we put that experience into the AI-assisted part of each review.

Agreed in writing
before we test anything.

We work remotely with businesses across the Philippines.

  1. Agree what we’ll check.

    Choose the systems with us. We set out what we may test and how we’ll handle your data, and you approve it in writing.

  2. We review, and a person confirms.

    You give us the access we agreed. AI helps with the analysis and a person confirms each finding. If something is urgent, we tell your named contact straight away.

  3. Go through the results, then re-check.

    We walk through the report with you and whoever will make the fixes, whether that’s your team or your IT provider. Once the fixes are in, we check them again.

Common questions.

Which audit is right for us?

Choose the Exposure Audit if one website or app is the main concern. Choose the Comprehensive audit if you want the wider picture for a company of up to 100 staff accounts. Regulated industries and groups with several companies get a custom quote.

Could your testing break anything?

We don’t run tests designed to crash or overload your systems, and we don’t send fake emails to your staff. We only test what’s listed in the scope you approve.

Will our code or data go into AI tools?

Only what you approve in writing before we start, including which tools we use and how long anything is kept. We work from test data wherever we can, rather than real customer records. If your code can’t go to an outside AI service, we’ll agree a manual approach, and any change to time and price, before you sign.

Will this certify us as secure or compliant?

No. We check the systems in your scope at one point in time, and report what we found and what we couldn’t check. It can’t promise we found every problem, and it doesn’t replace a certification a customer or regulator may ask for. Our OpenAI partnership doesn’t make the report an OpenAI certification either. If a customer wants a specific certificate, tell us early and we’ll say whether this audit helps.

Can our IT team or provider make the fixes?

Yes. Findings are written for whoever makes the fixes, and they’re welcome at the results meeting. If you’d rather we made the fixes, we’ll quote that separately.

Can we start small and upgrade later?

Yes. Book the Comprehensive audit within 60 days of your Exposure Audit report and we’ll take USD 400 off the standard USD 4,750, bringing it to USD 4,350. The credit applies to the same company and app, where our earlier work can be reused.

What does the re-check cover?

Ask for it within 30 days of your report. It covers the original findings listed on your package. New problems and new systems are quoted separately.

When can you start, and how long does it take?

The clock starts once the scope and testing permission are signed, payment terms are agreed and we have access. From then, the Exposure Audit takes 5–7 business days and the Comprehensive audit 15–20. Delays in getting access push the finish date back. Your proposal confirms the price, including taxes, before any work starts.

Tell us what
you’d like checked.

A few lines on the systems your business depends on, and what made you ask, is enough. We’ll reply about which audit fits, or whether you need one at all.

Rather talk it through? Book a call with Bernd (opens in a new tab).

Sending this doesn’t commit you to anything.

Please leave out passwords, customer records and anything confidential.

Optional campaign measurement

This helps us understand how people find us. No name, email or description is included in measurement events.

By sending this inquiry, you ask SageDynamics to review and respond to the information you provide. Read our privacy notice.

Prefer email? [email protected]

Book a call with Bernd

A 30-minute video call. Pick a time that suits you.

Loading Bernd’s calendar…

Calendar not loading? Open it in a new tab (opens in a new tab).