Question 1

Do I need technical staff to use this?

Accepted Answer

No. jITSecure was built for companies without a security team. The assessment uses plain language, the reports are executive-readable, and findings include step-by-step fix instructions your existing staff can follow. If you can fill out a form and follow a checklist, you can run jITSecure. For complex fixes, we offer professional remediation services.

Question 2

What frameworks does jITSecure cover?

Accepted Answer

jITSecure maps your results to CIS v8 Controls (the most widely referenced by cyber insurers), NIST Cybersecurity Framework, CMMC (required for defense contracts), and Massachusetts WISP requirements. The mapping is an estimate from your external scan results, not a framework assessment or audit.

Question 3

How is this different from our antivirus?

Accepted Answer

Antivirus protects against one type of threat on one device. It does not show what anyone on the internet can see about your domain: whether your email can be spoofed, whether your TLS certificates and security headers are set up correctly, or which services are exposed. The free jITSecure scan checks those with 140+ external checks today, and device checks (antivirus, patching, encryption) are coming soon with Managed Essentials.

Question 4

Can I use the reports for my insurance renewal?

Accepted Answer

Yes, for the external items. The free scan report documents what is visible from outside -- email authentication, TLS, security headers, DNS, and exposed services -- which supports the related questionnaire answers, and gives you a clear list of gaps to fix before renewal. Coverage and pricing decisions remain with your insurer and broker.

Question 5

What if we already have an MSP?

Accepted Answer

jITSecure works alongside your MSP. Most MSPs provide antivirus, firewall, and backup -- but they do not map to compliance frameworks or produce the documentation insurers require. jITSecure fills that gap. Some MSPs also partner with us to offer jITSecure as part of their service.

Question 6

How long does a scan take?

Accepted Answer

The free external domain scan usually takes a few minutes -- enter your domain, no install needed. The device scanner for Managed Essentials is coming soon. The insurance self-assessment quiz takes 3-5 minutes.

Question 7

How much does cybersecurity compliance cost for a small business?

Accepted Answer

Industry estimates range from $50K-$75K per year for a 50-employee company, and CMMC Level 2 certification alone can cost $50K-$150K in the first year. jITSecure starts at $0 for the self-service scan, $29/user/month for managed essentials, and the current price shown at jitsecure.com/packages for the full Cyber Essentials managed security stack.

Question 8

How do I get help?

Accepted Answer

Email coaching@jitaitoolbox.com with questions about your service, portal, billing, installing the agent or your reports. We reply within 1 business day. Support does not include general IT help desk work, such as fixing printers, email accounts or other software.

What can attackers see about your website, email, and domain? Check it free in minutes.