If you don’t know it’s there,
you can’t keep it up to date.
Do you have a current record of the websites, servers and services your organisation exposes to the internet?
I’ll investigate your external footprint, compare what I find with your existing records, and help you identify forgotten systems, unclear ownership and gaps worth investigating.
Get your asset inventory
Tell me your primary domain and a little about your organisation. I’ll confirm whether the £699 package fits before you pay.
Useful starting points include:
• Your primary domain and any other domains you know about
• Your hosting or cloud providers, if known
• Whether IT is managed internally, by an MSP, or both
Before you send
Please don’t include passwords, credentials, or other sensitive information in an initial enquiry. If we need to share anything sensitive, we’ll agree a secure way to do it.
What’s still running that nobody remembers?
A test server left online after a project. A website maintained by a supplier you no longer use. An old domain still pointing to a live service.
These things can survive staff changes, supplier handovers and cloud migrations. I’ll help you establish what is visible, what belongs to you and what needs attention.
-
Included
Your asset register
An editable record of the internet-facing domains, hosts and services identified within the agreed scope. Supporting evidence, ownership where confirmed, and uncertainties are recorded clearly.
-
Included
Gaps and next actions
A concise summary of discrepancies, unexpected services and unclear responsibilities, with practical actions for you or your IT provider.
-
Included
Your self-discovery guide
A practical guide your team can follow to identify unrecorded SaaS subscriptions, laptops, phones, routers and other internal equipment.
-
Included
Validation and handover
One round of questions to clarify ownership and purpose, followed by a brief handover of your inventory and next steps.
If you’re unsure what to include, that’s fine. Tell me your primary domain, organisation and main providers and I’ll confirm whether the £699 package fits before payment.
GET MY ASSET INVENTORYHow it works
Clear scope first, then evidence-led discovery and a practical handover.
We start with a quick scope check so you know the package is a fit before payment. Then you share what you already have — incomplete records are fine.
I compare discovery results with your records, clarify uncertain ownership with you (and your MSP if relevant), then deliver your editable inventory and next steps.
- Check the scope — tell me your primary domain, organisation and main providers so we can confirm the package fits before payment.
- Share what you know — provide existing records and relevant exports through an agreed secure route. Incomplete records are fine.
- Investigate and validate — I compare discovery results with your records and clarify uncertain ownership with you or your provider.
- Receive your inventory — get your editable register, practical next actions, self-discovery guide and brief handover.
About Ben
I run Ronin, an independent cybersecurity consultancy.
I’ve spent over ten years in cybersecurity and previously worked as a consultant at NCC Group. I’m used to working with small teams, leadership stakeholders, and external IT providers — and keeping the conversation practical and constructive.
I’ll review the discovery results, explain what the evidence supports and help you decide what needs attention. If you work with an MSP, we can involve them in validating ownership and acting on the results.
Questions,
answered plainly
A few things that come up often for an Internet-Facing Asset Inventory.
What does the service cover?
A snapshot of internet-facing assets within an agreed scope. Ownership and purpose sometimes require confirmation from you or your providers.
Will this find all our shadow IT?
Coverage depends on the scope and available evidence. Internal devices and employee SaaS usage require additional information. The included guide explains how your team can investigate those.
What if we don’t have an asset register?
That’s fine. Start with the domains and provider information you know. Missing information and coverage limitations will be recorded.
Can you work with our MSP?
Yes. Their records and knowledge can help confirm ownership and purpose.
Is this a penetration test?
No. This service establishes an asset baseline. Vulnerability testing, remediation and ongoing monitoring can be scoped separately.
Do we have to buy further services?
No. You receive a standalone inventory and can act on it with your own team or provider.