SabiSafe
Cyber-insurance readiness for small firms

Pass your cyber-insurance review. Stop ransomware at the door.

Insurers now ask hard questions about MFA, backups, admin access and patching. SabiSafe finds the gaps, fixes them, and gives you the evidence your broker needs, in days, not months.

Book a free readiness call Try a free check
Fixed fees, fixed scope Read-only audit, nothing changed Most audits done in a week

Can you answer “yes” to these?

The six questions every insurer asks. Tick what's true today.

0 / 6

20

controls in our ransomware & insurance review

~1 week

from kickoff to report for most firms

0

changes made during the audit: it's read-only

≤200

staff: built for small and mid-sized firms

Law firmsAccounting & taxHealthcare practicesEngineeringLogisticsNonprofits
Services

Fixed-fee work, priced up front

Fixed-scope engagements for firms with up to 200 people. No surprise invoices.

Start here

Readiness Audit

Know exactly where you stand.

Readiness Checkup to 25 staff · scripted checks + report$1,500
Full Readiness Auditinterviews, evidence, remediation planfrom $3,500
  • 20-point ransomware & cyber-insurance review
  • Read-only scripted checks of Active Directory / Entra ID, servers, endpoints and email security
  • Outside-in scan of what attackers and insurers see
  • Plain-English report, prioritised fix list, answers for your insurance application

Hardening & DR Testing

Close the gaps, prove you can recover.

Fixed-fee projectscoped after the audit$2,500–$5,000
  • MFA and Conditional Access, admin tiering, Windows LAPS
  • Immutable, off-site backups and a timed restore drill
  • Failover runbooks for your critical systems
  • Firewall, remote access and patching clean-up

Virtual CISO

A security lead, without the salary.

Essentialspolicies, quarterly review, renewal support$2,000/mo
Standardmonthly reviews, training & phishing included$3,500/mo
  • Security policies and annual insurance renewal support
  • Monthly controls review and quarterly restore tests
  • Staff security training and phishing simulations
  • Incident response plan and tabletop exercise

Security awareness training and phishing simulations on their own: $4 per user per month. Prices are for firms up to 200 staff; larger or multi-site environments are quoted after the discovery call.

How it works

From first call to insurer-ready

Minimal disruption to your staff. You always know what happens next.

A professional signing papers at his office desk
Photo: Gylain Omer / Unsplash

  1. Discovery call

    A short call on your setup, your insurer's questionnaire and your renewal date.

  2. Scripted audit

    Read-only collection across identity, endpoints, servers, backups and email. Nothing is changed.

  3. Report & walkthrough

    Your score against 20 controls, what failed, and the order to fix it.

  4. Fix & evidence

    We remediate (or guide your IT provider) and document proof for the insurer.

Free tools

Try the toolkit we use on every engagement

Document Security Check

See the usernames, server paths, tracked changes and old revisions hiding in a PDF, Word or Excel file before you send it.

Check a document

PolicyPilot

Compliance gap analysis against SOC 2, ISO 27001, HIPAA, GDPR, NDPA and NIST CSF. Included with every vCISO retainer.

Run a gap analysis

Email security snapshot

Ask for a free SPF, DKIM and DMARC check of your domain on your discovery call: the fastest fix against spoofing and invoice fraud.

Book the call
Who you work with

Jamike Ugwu

SabiSafe is led by Jamike Ugwu, an infrastructure and security engineer with more than ten years of hands-on experience keeping business systems available, recoverable and secure.

  • Systems engineer supporting government & private enterprise systems in the DMV
  • Disaster recovery with VMware Site Recovery Manager, Double-Take and Zerto
  • Windows Server, Active Directory, Linux, VMware and Cisco networks
  • High availability and zero-trust access design
  • Chemical engineering degree, University of Lagos
Questions

Before you book

Will the audit change anything on our systems?
No. The audit scripts only read settings and logs. Any fixes happen afterwards, with your sign-off, as a separate project.
We already have an IT provider. Can you work with them?
Yes. Many clients keep their IT provider for day-to-day support; we give them a prioritised fix list and check the evidence before your renewal.
Does this guarantee we get coverage?
No one can promise that: insurers decide. What we give you is an honest picture, the fixes that matter most to underwriters, and documented evidence for your application.
How soon can you start?
Usually within a week of the discovery call. If your renewal date is close, say so on the call and we'll prioritise the controls insurers check first.

Renewal coming up?

Book a free readiness call. We'll review your insurer's questionnaire and tell you where you stand.

Pick a time on my calendar Prefer email? hello@sabiapps.com

Assessments are point-in-time and do not guarantee insurability or prevent every incident.