Step 1 — A ten-minute phone call
Before we look at anything, we talk. How many staff, what you use (Microsoft 365, Google, something else), whether you have a server, what's prompted the check, and what's worrying you. This shapes what we look at. It's also where you tell us anything we should stay away from.
Step 2 — One workstation, remotely
You pick a representative computer — usually the owner's or a typical staff machine. We connect via a one-time remote support session (nothing stays installed) for about ten minutes and check: operating system and application update status, whether antivirus is present and running, disk health, whether the user has local admin rights, what's set to run at startup, and any obvious signs of trouble.
Step 3 — Your Microsoft 365 tenant, read-only
We ask for temporary read-only access to your Microsoft 365 admin centre — which you revoke the moment we're done. We check: is MFA enforced or just available; how many admin accounts exist and whether they're separated from daily-use accounts; mailbox forwarding rules (a classic sign of compromise); external sharing settings; whether audit logging is on; licence types; and whether any third-party backup exists.
Step 4 — A quick backup and continuity conversation
Where are your files? Is there a backup? Has anyone ever restored from it? What happens if the main computer dies on a Tuesday? This is a conversation, not a scan, and it's usually the part where the most important gap surfaces.
Step 5 — The report
Within 48 hours you get a short, plain-English document. What we found, ranked by risk. What each finding means for your business. What it would take to fix. A snapshot of where you sit against the Essential Eight. No jargon, no 40 pages, no scary formatting designed to sell you something.
What the report is not
It's not a sales document. It's not a full security audit or penetration test — those are much larger engagements. And it's not the whole picture; one workstation and one tenant is a sample. But it's a remarkably accurate sample, because the same gaps tend to be everywhere once they're anywhere.
What happens next
Nothing, unless you want it to. The report is yours. Some businesses take it to their existing provider and ask them to address it. Some fix the easy things themselves. Some ask us to scope a managed IT arrangement. All three are fine outcomes.
TechFix Pro Managed
Find out where your business actually stands.
Free 15-minute IT health check for Sydney businesses. One workstation, your Microsoft 365 tenant, a plain-English report. No obligation.
Frequently asked questions
How long does the health check take?
About 15 minutes of your time: a short phone call and a remote session. The report follows within 48 hours.
Is anything installed on our systems?
No. The workstation check uses a one-time remote session that leaves nothing behind. The Microsoft 365 check uses temporary read-only access you revoke afterwards.
Is it really free with no obligation?
Yes. There's no cost and no requirement to do anything afterwards. We do it because it's the most honest way to start a conversation — and because businesses that see their actual gaps tend to want them fixed.
Can you do a health check if we use Google Workspace instead of Microsoft 365?
Yes — the tenant check is adapted for Google Workspace. The principles are the same: MFA enforcement, admin accounts, sharing settings, backup.
Related articles