Lighthouse — readiness assessments without the midnight write-up
For a small cybersecurity consultancy running readiness assessments for other businesses.
Every assessment ends the same way. You've walked the client's floor, worked through access control and backups and vendor risk, and filled a spreadsheet with answers. Then comes the part nobody bills well for: hand-calculating a score, then staying up until midnight writing the remediation memo and formatting it to look like a real deliverable before the client call in the morning. The polish is what wins the next client — and it's the work that eats your evenings.
One way it plays out
- The assessment gets captured on-site, branching as you go — answer "no formal offboarding process" and the right follow-ups appear; answers sync as you enter them, so nothing depends on re-typing notes back at the office that night.
- The score comes out on your rules — and you can change the rules — weight access control heavier than physical security if that's your view, and adjust how much vendor risk counts next quarter from a dashboard, without waiting on anyone to rebuild anything.
- A remediation roadmap is drafted for you to review — what to fix first, why it matters, roughly how much effort each item takes — grounded in this client's actual gaps, not a generic checklist. You adjust the wording, approve it, and the finished report renders in your branding, the same polish whether it's the client's first assessment or their tenth.
That's one way it plays out — the questions, weights, and report template get shaped around how your practice already assesses.
So the client gets a report that reads like it came from a team three times your size — and you got your evening back.
Works for: cybersecurity consultancies, compliance auditors, vCISO practices — any multi-client assessment workflow.
Everything stays on servers here in Canada, and once it's built the whole thing is yours to keep — not a subscription, and not tied to anyone's platform. I'm here in Winnipeg: I set it up, and I stay with you and your team until it's running the way you want.
Curious how it's built? Technical breakdown available on request.