See what’s happening
AssayMark reads your sign-in records and server logs and flags what doesn’t belong — repeated failed logins, access at unusual hours, changes nobody expected.
See what it checks →SECURITY REVIEW FOR SMALLER ORGANISATIONS
Find out what’s actually wrong with your systems — without handing over your passwords.
AssayMark reviews your logs, your website and your server settings, then gives you a short list: what to fix, why it matters for a business like yours, and what to do about it.
Built for organisations that carry real risk and have no security team.
A SHORT, PRACTICAL ANSWER
01What is happening
02What is exposed
03What matters to your business
04What to fix first
05How to verify it was fixed
ZERO SECRET TRANSFER
Your passwords never reach us.
Configuration files are read inside your own browser. Only non-secret settings are ever transmitted — passwords, API keys, database credentials and salts stay on your machine. We can’t leak what we never receive.
There is no agent to install and no credentials to hand over, which is the usual reason smaller organisations never get assessed at all.
The settings we do receive are independently re-checked on our side, so the result doesn’t rest on trusting the browser either.
SEE ASSAYMARK IN ACTION
See it work — 90 seconds
A configuration file checked without a single password leaving the browser, and the report it produces.
THE PROBLEM
You already have the evidence. Nobody’s reading it.
Every system you run keeps a record of what happens to it — who signed in, what failed, what changed, what was accessed. That record is where a security problem shows up first, usually long before anyone notices. In most smaller organisations nobody looks at it, because reading it is a specialist job and there is no specialist.
WHAT ASSAYMARK DOES
Three questions, answered in plain English
Check what’s exposed
It assesses your website and server configuration the way someone probing it would, and tells you what is visible that shouldn’t be.
See what it checks →Know what to do first
Every finding comes with a plain-English explanation of what it is, why it matters for a business like yours, and what to do about it — in priority order, not alphabetical order.
See how priorities are made →SECURITY MEMORY
It remembers what you fixed.
Most tools hand you a fresh snapshot every time and leave you to compare them. AssayMark tracks each finding across checks, so it knows the difference between a problem you actually fixed and verified, and one that simply didn’t appear in the latest sample. Problems that keep coming back are flagged as coming back.
First seen
Fixed and verified
Returned later
Tracked over time
EXPLAINABILITY
Every priority shows its working.
When AssayMark says something is urgent, it shows you why: the technical severity, your business context, and the history behind it. The decision itself is rule-based and auditable.
There is a machine learning component, and it is deliberately limited to an advisory role — it can adjust a score, it cannot make the call. If you ever have to explain a decision to a client, an insurer or a regulator, “the model said so” is not an answer.
Technical severity
Business context
History
Advisory ML signal
Rule-based, auditable decision
WHO IT’S FOR
Built for organisations without a security team
- Roughly 10 to 250 people
- A website, a few servers or cloud accounts, and real information worth protecting
- IT handled by one person wearing several hats, or by an outside provider
- Increasingly asked to prove your security — by a client’s questionnaire, an insurer at renewal, or a procurement process
PRE-LAUNCH FREE REVIEWS
Free security reviews, while we’re pre-launch
AssayMark is not yet on sale. It has no paying customers, and we cannot take payment at this stage. We are running a small number of free reviews for UK organisations, to find out whether what it produces is genuinely useful.