A methodyou can check.
Same rubric, same evidence standard, same review on every engagement, so quality does not depend on who is on the job.
Timings run from the day access is in place.
What never changes.
Every review, whatever the service, is held to the same five rules.
Score against a published rubric
You see the areas, the weights and the bands before we start.
Tag every finding by evidence
So you know how much weight each finding can bear.
Put a cost on every problem
Effort and dollar ranges, so findings turn into decisions.
Write for decision-makers
Every finding in plain English, with the technical detail in the evidence pack.
Review before release
Two sets of senior eyes on every deliverable.
Published before we start.
Read the work before you buy it.
A complete sample for each service, written for a fictional company using our real method and format. Tell us where to send it.
Cyber Risk Assessment
Ridgeline Supply Co, a 420-person building supplies distributor on Microsoft 365 with an outsourced IT provider.
- Cyber risk score 47 out of 100, rated Critical
- Three likely attack paths
- 14 findings with evidence and fix effort
- A 12-week fix plan to 83, sized at USD 65k to 92k
AI Exposure Assessment
Northbeam Freight Group, 420 staff on Microsoft 365 with 150 Copilot licences.
- Readiness score 41 out of 100
- Five questions any employee could ask, and what Copilot would surface
- 12 findings with evidence
- A 10-week fix plan to 82, with before and after scores
Technical Due Diligence Report
Halberd Field Software, a USD 8.1M revenue field-service software company.
- Overall Amber rating and the 9-area scorecard
- A live security exposure to resolve before close
- AI claims tested: 1 of 3 supported
- USD 625k to 885k remediation sized, protections for counsel and a 100-day plan
Samples are illustrative. All names, figures and findings are invented to show the format.
Your systems, your data, our discipline.
Security and confidentiality
- Mutual NDA before any access
- Read-only access as the default, and written authorisation before any scan
- Live security exposures reported to you the same day, and never touched by us
- Evidence deleted 90 days after delivery unless you ask us to keep it
- Every specialist is under a contractor agreement with confidentiality and IP terms
Independence
- No success fees and no share of any deal
- No software, security product or insurance resale, and no vendor commissions
- We never act for both sides of the same deal
Nothing we recommend earns us anything but the fee you agreed.
Clarity before commitment.
Tell us what you are working on. It takes two minutes, and we reply within one business day.
contact@collatenow.com.aua brief
Collate Pty Ltd · ACN 702 564 823 · Adelaide, South Australia. Collate provides technology assessments and data services. We do not provide legal, tax, financial or investment advice, and we do not advise on the price of any transaction or whether to proceed. Cyber risk assessments are not a guarantee against attack and are not insurance advice.