Security Aid is a non-profit providing free tools, guidance and practical support for SMBs, meaning small and medium-sized businesses. Aid+ paid services and platforms fund the free side of the mission and the long-term goal of running managed security services for SMBs at little or no cost.
Public tools, practical guidance, awareness support and initial advisory time are kept free so SMBs can get real cyber security help without a consultancy barrier.
Aid+ covers premium assessment, advisory and platform delivery. Profit is used to keep Security Aid free where possible and to build a managed security service model for SMBs.
Application testing delivered through Aid+, with the first 4 advisory hours free before deeper testing or retest work becomes a paid engagement.
First 4 hours free, then paid at discretionary standard rates.
View serviceStructured vulnerability assessment support, with 4 free advisory hours before deeper assessment and reporting moves into Aid+ delivery.
First 4 hours free, then paid at discretionary standard rates.
View servicePragmatic security advisory for leadership and IT teams, with the first 4 hours free before ongoing advisory work moves into Aid+.
First 4 hours free, then paid at discretionary standard rates.
View serviceReduce everyday risk with free role-aware training guidance that turns security advice into practical habits.
Free as part of the non-profit mission.
View serviceFree practical cyber security talks and workshops for SMBs, students and community groups.
Free community and SMB-focused sessions.
View servicePrepare your business to respond calmly and effectively when an incident occurs, starting with 4 free hours of planning and review.
First 4 hours free, then paid at discretionary standard rates.
View serviceThird-party and supplier security reviews with 4 free advisory hours before deeper review and evidence analysis moves into Aid+.
First 4 hours free, then paid at discretionary standard rates.
View serviceImprove Microsoft 365, Entra ID and Defender configurations with 4 free review hours before deeper assessment and reporting moves into Aid+.
First 4 hours free, then paid at discretionary standard rates.
View serviceUnderstand whether your logs, alerting and detections cover the threats that matter most, with 4 free initial review hours.
First 4 hours free, then paid at discretionary standard rates.
View serviceSecurity architecture, roadmap and control design work, with the first 4 hours free before moving into paid Aid+ delivery.
First 4 hours free, then paid at discretionary standard rates.
View serviceThese public tools stay free. Premium assessment and managed-review platforms sit under Aid+ and help fund the free mission.
Aid+ now centres on Assessment Aid+, Containment Aid+ and Asset Aid+. The first 4 hours for advisory-led work are free, then delivery moves to discretionary standard rates.
Critical external asset discovery for internet-facing domains, infrastructure, exposed admin surfaces and newly discovered public assets.
Paid Aid+ platform. Advisory scoping starts with 4 free hours; ongoing delivery, tuning and reporting are paid. Profit funds free SMB services and the managed service mission.
View Aid+ PlatformOne premium assessment platform where you choose the assessment you need and complete the relevant control review in one Aid+ workspace.
Paid Aid+ platform. First 4 advisory hours free, then assessment and reporting work is billed at discretionary standard rates.
View Aid+ PlatformPremium containment and mass-compromise review delivery for Azure/M365, Okta and Salesforce environments.
Paid Aid+ platform. The first 4 hours are free for triage and scoping; deeper investigation, reporting and workflow design are paid.
View Aid+ Platform
A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study by Rakesh Krishnan for…
Read article
The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm,…
Read article
Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on…
Read article
A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine…
Read articleStart with the free tools and resources. If you need deeper review, architecture or managed assessment support, Aid+ funds that work and puts the profit back into free SMB services and the managed security mission.
See How Aid+ Works