Proxy IT, LLC

Can your guest Wi-Fi reach your register?

Many small-business networks are set up once and never checked again. We check yours, write down what we found in plain words, and fix only what you want fixed.

Get a scope and quote See what we check

Website review $599 · network assessment from $1,500

Example finding, written the way our report writes it. Not from a client.High

Guest Wi-Fi reaches the register

Tested path, from the guest Wi-Fi to the register:
Guest Wi-Fi
ports 445 and 3389 answered
Register
Why it matters

Anyone who joins your guest Wi-Fi can reach the machine that takes cards. It's the kind of thing an insurer's questionnaire asks about.

Fix

Put the guest network on its own segment and block it from the register and office at the firewall. About an hour of work, retested from the guest side.

Every finding comes with the evidence, a plain-words reason, a fix, and a retest. You decide what gets done.

What we check, and what it costs

Each offer starts with a written scope and a signed letter that names exactly what we may touch. The prices cover the scopes shown; anything larger is quoted first.

  1. Network Vulnerability Assessment

    Can the guest Wi-Fi, or the cameras, reach the register? What's open to the internet?

    from $1,500

    One location, up to 25 devices, 5 public addresses and 1 firewall

    Ask about an assessment

    We check

    • Your public addresses, scanned from outside your network
    • Every authorized device inside, scanned and listed
    • Firewall rules and segmentation: in plain words, who can reach what
    • Every major finding validated by hand before it's written down
    • Priority by exposure, business impact and what's actually exploitable

    You get

    An executive summary, the technical findings with evidence, a fix plan in priority order, a walkthrough with you, and one rescan of the same scope within 30 days of the report.

    Useful as PCI readiness and for an insurer's or a client's questionnaire. It is not an audit or a certification.

  2. Network Watch

    What changed since we looked?

    Monthlyafter an assessment, quoted with it

    A Proxy IT box at your location, plus a weekly look from outside

    Ask about Network Watch

    It watches for

    • A device newly seen on the network segments the box is connected to
    • Guest Wi-Fi reaching the register or the office, tested every day from the guest side
    • Open ports and services that change on the hosts we watch
    • A public address newly exposed
    • A certificate expiring within 30 days

    You get

    Alerts as they happen, by email or text. We review them on business days and tell you within one business day what needs action and why. A one-page report each month: what changed, what to fix.

    Installed during the assessment visit; its findings are the baseline. Not 24/7 monitoring, and not incident response. The box stays ours and comes back when you cancel. Uptime and data checks for a website are a separate service: see how we monitor.

  3. Website Security and Exposure Review

    Who can send email as your domain? What does your site expose?

    $599one site

    Your site plus the subdomains we agree on in writing

    Ask about a website review

    We check

    • Email: who is allowed to send as your domain (SPF, DKIM, DMARC)
    • Forgotten DNS records pointing at services you no longer use
    • Exposed logins, admin pages and files
    • Keys left in page source or public files
    • The third-party scripts your pages load and who runs each, as an inventory
    • WordPress core, plugin and theme versions as publicly visible
    • TLS and HTTP settings

    You get

    A short report in priority order with evidence and fix steps, a walkthrough, and one retest of those findings within 30 days.

    On Shopify, Squarespace, Wix and the like we review the settings you control; the platform's own parts are marked as theirs and never scanned.

Fixes are optional. $150 an hour against an estimate you approve first, or hand the report to your own IT person; it's written for that.

Prices are for one scope, in writing, before any work.

How an engagement runs

Nothing touches your network before step two, and nothing gets fixed without your yes.

  1. ScopeWhat you run, what worries you, how you take payments. Exact targets and exclusions, a work window, a contact we can reach.
  2. LetterA signed engagement letter that names all of it. Your authorization, our limits, how your data is handled.
  3. AssessDiscovery first, then the checks, inside the window and rate-limited. No denial-of-service tests. One call to us stops the work.
  4. Report and walkthroughFindings with evidence, in priority order. What's uncertain is written down as uncertain. You decide what gets fixed.
  5. Retest, or watchOne retest or rescan within 30 days is included. Network Watch keeps the picture current after that, if you want it.

What this is not

  • Not a compliance audit or a certification. We get you ready and fix things; an auditor signs.
  • Not a penetration test. We find and validate weaknesses; we don't stage an attack.
  • Not a guarantee that a network or a site is safe, or that you'll pass anything.
  • Not 24/7 monitoring or incident response. Network Watch detects and reports on business days.
  • No authenticated testing, source-code review or complex APIs unless we scope them separately.
  • No work without a signed letter naming the exact targets, exclusions, window and contact.

PCI, in plain words

If your store runs on a hosted platform like Shopify, the system that takes the card is the platform's, and the quarterly scan requirement usually applies to it, not to you. Most such merchants file the short SAQ A questionnaire.

If you run your own payment setup, you may need quarterly external scans by an Approved Scanning Vendor and, under some questionnaires, an annual penetration test. We don't run those scans: the vendor does, and you pay them directly. We get you ready and fix what they find.

Which questionnaire a counter terminal falls under depends on how it connects; your acquirer or processor confirms it. Either way, the assessment answers the question an insurer or a client will ask: is the register on its own network?

Who does the work

Over 10 years of network and security work, including firewalls, segmentation, cloud networking, vulnerability scanning, and technical support for PCI and SOC 2 audit processes.

We build what we advise on. We design, run and monitor our own production systems, and we publish a free network diagnostics app. The same habits come to your network: written authorization before anything, evidence for every claim, and plain words in the report.

  • Printed PriceA production platform on Cloudflare we designed, built and keep running.How we built it →
  • HanaOur free network diagnostics app for Windows and Mac.hana.proxy-it.co ↗
  • WebsitesCustom-designed sites for businesses, with an admin page the owner runs from a phone.The offer →
  • Card shop websitesOur offer for shops: a site with an admin console the owner runs from a phone.The offer →

Questions owners ask

  • Will a scan take my network down?

    We use safe scan profiles with no denial-of-service checks, inside a window you choose, rate-limited. You name a contact who can stop us with one call; how fast we stop is written into the letter.

  • What do you need from me?

    Someone who can sign for the business, a list of what's yours (addresses, devices, the site), a window when we may work, and a number we can reach during it. All of it goes into the letter before we start.

  • Do I have to buy the monthly?

    No. Network Watch is optional, only after an assessment, and cancels with 30 days' notice. The box is ours; we collect it within 14 days.

  • Can you fix what you find?

    Yes, if you want us to: $150 an hour against an estimate you approve first. Or hand the report to your own IT person. It's written so they can act on it.

  • My site is on Shopify. Is a review worth it?

    We review what you control: email authentication, DNS, exposed logins, keys in page source, the scripts your pages load. The platform's own infrastructure is never scanned and is marked as theirs in the report.

  • What happens to our data?

    Evidence is kept separately for your engagement and deleted on the schedule in the letter. Only the minimum goes to any outside tool, and the letter says which.

Start with a scope call

Tell us what you run. We'll ask a few questions, then send a written scope and quote. Nothing is scanned until the letter is signed.

  1. Email or text us what you runA shop, an office, a clinic; roughly how many devices; whether you take cards at a counter, online, or both.
  2. We send a scope and a quoteAfter a short call. Exact targets, what's excluded, the window, and the price for that scope.
  3. Sign the letter, pick the windowThe work starts after both. The report and walkthrough follow, then the retest.
Email us what you run Text us instead or call (832) 303-9654