STP
SCRIVENER
TECHNOLOGY PROFESSIONALS
The test What I fix How it works Who I am Questions Pricing
FOR SMALL AND MID-SIZE BUSINESSES ON MICROSOFT 365 + AZURE

Your IT guy says you're fine. Want to bet $123,000 on it?

I go through your Microsoft 365 and cloud setup, find the holes, and tell you what they're risking and what they're costing you. Then I fix them at night, after your people have gone home.

Take the 2-minute test See the price
Read-only access
Flat, published price
Find nothing, pay nothing
No account managers, no slide decks, no contracts.
You deal directly with the guy doing the work.
THE NUMBERS

Most of these break-ins start with something dumb, like a reused password.

$3.05B
lost to business email compromise in 2025. That's a fake invoice or a "CEO" asking for a wire, sent from a hijacked or spoofed mailbox.
FBI IC3, 2025 Internet Crime Report
~$123K
average loss per reported email-compromise case. For a 30-person shop, that could be a couple months of payroll.
$3.05B across 24,768 complaints, FBI IC3 2025
97%
of identity attacks are just password guessing: spraying common passwords at thousands of accounts until one works. Bots do most of it.
Microsoft Digital Defense Report 2025
99%+
of those get blocked by phishing-resistant MFA that's set up properly. The trouble is that most small businesses have MFA on some accounts and not others, and an attacker only needs one.
Microsoft Digital Defense Report 2025
THE 2-MINUTE EXPOSURE TEST

Ten questions. Answer honestly, nobody sees this but you.

"Not sure" counts against you. If you don't know whether something is set up, it's safest to assume it isn't.

0 of 10 answered
10 to go
Answer all ten to see your exposure score and exactly what's wrong.
THE CHECKUP

What I actually check.

Entra ID
This is your Microsoft 365 sign-in system. I check who has MFA and who doesn't, how many people have full admin rights, whether old sign-in methods that skip MFA are still turned on, and which outside apps and guest accounts can get into your email and files.
Active Directory
If you have a server in the office, this is what runs your logins. I look for accounts belonging to people who left years ago, service accounts that haven't had a password change since they were set up, and admin groups nobody has looked at in a long time.
Azure
If you run anything in Microsoft's cloud, I check what's open to the internet that shouldn't be, who has permission to change things, whether your backups would actually restore, and what you're paying for that nobody is using.
I also look for money.
Unused licenses, and cloud resources somebody forgot to turn off. I've found them in almost every environment I've cleaned up over fourteen years. It's pretty common for the savings to cover the checkup on their own.
HOW IT WORKS

You won't have to babysit any of this.

01
I start with read-only access.
I can see your settings but I can't change anything, and you can shut my access off whenever you want. If you have a server in the office, you run one script and email me the results.
02
You get a short report.
The scanning tools spit out hundreds of findings. I sort through them so you know which handful actually matter, and I explain them without the jargon. You also get a recorded video walkthrough, so you don't have to sit through a meeting.
03
I fix things after hours.
Every fix has a flat price you approve before I start. I do the work at night or on a weekend, with a way to undo every change. Your people come in the next morning and nothing looks different.
WHO YOU'D BE WORKING WITH

I've done this for big companies. I'd rather do it for you.

I'm Stefann. I grew up in a small fishing village in coastal Alaska. Out there, if something breaks, you fix it yourself, and you check your gear before you need it, not after.

I spent my Navy years handling classified communications, then worked infrastructure for the State of Alaska. After that I kept 15 car dealerships and about 2,000 users up and running. These days I'm a senior engineer at one of the largest MSPs in the nation, looking after hundreds of servers for some very large customers.

I've watched big providers treat small businesses like a ticket number. You should get the same quality of work a big company gets, from someone who answers his own phone and tells you straight what's wrong.

Based in New Hampshire. Working anywhere Microsoft 365 does.
STRAIGHT ANSWERS

The questions everybody asks.

I already have an IT person, or an MSP.

Good, keep them. I'm a second set of eyes, not a replacement, and I'll hand the report straight to them if you want. Most good IT people are glad to have someone double-check their work. If yours gets defensive about it, that's worth noticing.

You want access to my systems? How is that safe?

It's read-only. I can look, I can't change a thing, and you can pull my access with one click whenever you like. Nothing gets touched until you approve a fix, in writing, at a price you already know.

Why does this cost less than the big firms?

It's just me. There's no sales team or office to pay for, so the price is mostly my time.

How long does it take?

Most checkups wrap up within about two weeks of getting access. Fixes get scheduled after hours, on a night that works for you.

What if you don't find anything?

Then you don't pay, and you still get a written report showing your setup is in good shape, which is nice to have on file.

We're not a tech company. Is this really for us?

Yes. Most of the businesses that get hit aren't tech companies. They're dealerships, clinics, law offices, and contractors that run on email like everybody else.

Find out what's open before someone else does.

You get a report of what's putting you at risk and what you're overpaying for, ranked by what matters most, plus a recorded walkthrough and a flat quote for anything worth fixing. There's no contract and no retainer. The price is posted below, because I don't think you should have to sit through a sales call to find it out.

UP TO 50 USERS
$1,500
One-time flat fee
51 TO 150 USERS
$2,500
One-time flat fee
FOUNDING RATE
$750
For my first three clients, up to 150 users. All I ask in return is an honest review and permission to write up what I found, with your name taken out.
The guarantee.
If I don't find at least three things worth fixing, you don't owe me anything.
Book a checkup Take the test first

Get in touch.

Tell me a little about your business and I'll get back to you, usually within a day.

Scrivener Technology Professionals // Stefann Paddock, New Hampshire
Sources: FBI Internet Crime Complaint Center, 2025 Internet Crime Report. Microsoft Digital Defense Report 2025. Average loss per case is total 2025 BEC losses divided by BEC complaints.