Remote, Nationwide · Based in Texas
Watching attackers from the high ground.
Hawkcrest Cyber helps businesses of about 5 to 50 people protect the client information they’re trusted with. Plain-English findings, fixed prices to start, and all work done remotely by a U.S. Air Force veteran.
Already on Microsoft 365? See the $499 Microsoft 365 Security Assessment →
Who we help: dental and medical offices, law firms, CPAs and bookkeepers, veterinary practices, insurance agencies, med spas and wellness businesses, and small professional-services firms.
Free tools
Two quick ways to see where your business stands before you spend anything.
What we do
Start with a fixed-price check. Everything else is quoted per project.
$299 Flat rate
A fully remote, outside-in check of the basics: your email domain (SPF/DKIM/DMARC), website TLS and security headers, exposed services, and known breach exposure, plus a short questionnaire on MFA, backups and patching. No access to your systems is needed. You get a short, prioritized findings list in plain English. Fixes are quoted separately.
$499 Fixed price
A remote, read-only review of your Microsoft 365 / Entra ID tenant for businesses with up to 25 users: sign-in settings, MFA and Conditional Access, admin roles, Defender for Office 365 and Exchange Online mail filtering, SharePoint and OneDrive sharing, and Secure Score, plus backup and email domain (SPF/DKIM/DMARC) checks and a short endpoint and patching questionnaire. You get a prioritized findings report and a 30-minute remote readout call, about 5 business days after we receive access and your questionnaire.
Not included: fixes (quoted separately), onsite work, penetration testing, Google Workspace, or compliance audits.
Quoted per project
Part-time, remote security guidance for a business that doesn’t need a full-time security hire: setting priorities, working through client and insurance security questionnaires, preparing for audit conversations, and checking in on progress.
Independent, vendor-neutral assessments that tell you, in plain English, what matters most for a business your size and what to fix first.
A broader look at your people, devices, data, and vendors, with a prioritized roadmap of what to fix first.
We check MFA coverage, admin accounts, and who still has access, so access matches who works for you today.
Safer settings for the cloud apps and file sharing your business runs on.
A simple AI use policy and data guardrails, checked before your team relies on AI tools with client information.
See the gaps between what you do today and what a framework, contract, or client questionnaire expects, and what to fix first.
Compliance Gap Assessment: NIST 800-53, NIST 800-171, CMMC readiness, and ISO 27001 gap analysis.
Practical help planning devices, accounts, and infrastructure, and making them harder to break into.
Explore: Risk Assessment · Microsoft 365 Security · AI Security & Governance · Remote Consulting Nationwide · All services
About
Hawkcrest Cyber was founded by Cory Zaner, a cybersecurity architect and U.S. Air Force veteran (2002–2008). He has nearly 25 years in cybersecurity and IT, including about five years leading a cloud security architecture team.
His hands-on work centers on Microsoft 365, Entra ID, and Microsoft Defender, and he leads security reviews, security questionnaires, and audit discussions. That’s the same work a small business faces when a client, insurer, or partner asks how it protects data. All Hawkcrest work is delivered remotely.
Why Hawkcrest. A hawk sees the whole field from the crest, its high ground, long before trouble arrives. I spent six years in the Air Force learning to see threats early and protect what matters. Hawkcrest Cyber brings that same watchfulness to your business: clear eyes, steady judgment, and plain advice.
Every engagement gets the same discipline: clear communication, honest scoping, and fixes sized for a small business.
Microsoft 365
Depending on your plan, Microsoft 365 may already include security features that many small businesses never turn on. We help you see what you have, close the gaps, and use it before you buy another tool.
MFA, Conditional Access, and fewer admin accounts.
Phishing and malware filtering, plus Safe Links and Safe Attachments where licensed.
External sharing settings that match how you actually work.
Device compliance and endpoint protection settings.
Insights
Turn on MFA for email, banking, and admin accounts, then lock down Microsoft 365 with security defaults or Conditional Access.
Read guide →
This weekend I had a team of AI bots building websites for me. Not helping. Building. They wrote the code, deployed it, and changed DNS on live domains while I made coffee. That's either really cool…
Read article →
Most small businesses already pay for Microsoft 365. Email, Word, Excel, Teams. It's just "the office stuff." But depending on which plan you're on, that same subscription can also be your phishing…
Read article →Credentials
Frameworks: NIST 800-53 Rev. 5 · RMF/STIG · ISO 27001 · CIS Level 2 · Zero Trust
Get started
Tell us what’s on your mind: a client security questionnaire, your Microsoft 365 setup, or simply where to start. Everything is done remotely.
[email protected]