01Fixed-scope diagnostic
Diagnostics
Understand what your systems do, where work gets stuck, and what needs attention. I review the agreed tools and workflows, then give you a written assessment and debrief.
Best fitTeams operating in Japan that need a clear diagnosis before choosing software, changing a workflow or starting a larger project.
The problem
Know what you are working with.
Diagnostics is a fixed-scope IT assessment for businesses in Japan, delivered in English as a written report and a debrief, from ¥158,000 + tax. I review the tools, accounts and workflows we agree on in advance: who holds admin rights and domain ownership, how Google Workspace or Microsoft 365 is set up, where the same data is entered twice, which subscriptions overlap, and what an attacker could see of your domain from outside. The report records what you run, who owns each part, what is at risk and what to change first, in an order your team can act on with me or with another provider. Diagnostics is the first of five stages and is usually where a business starts, though it is also the right step after a Decision Session raises more questions than it settles. The findings become the plan for a Digital Baseline when a rebuild is justified.
Your team may be entering the same information twice, paying for overlapping tools, or struggling to produce a reliable report. I trace how the work happens and find where the setup is causing trouble.
I map the tools and responsibilities, follow the work between them, and check the points that need attention. You get findings you can discuss with your team or take to another provider.
- Written
- Findings remain usable after the meeting
- Prioritized
- The important problems ranked first
- ¥158,000+
- Starting price plus tax, confirmed before work begins
What is included
A written assessment you can use.
- 01
System inventory
A list of the relevant software, data and service providers.
- 02
Workflow and dependency map
Where information comes from, who uses it, and where work gets stuck.
- 03
Ownership review
Who decides, who operates, who approves, and where responsibility is unclear or missing.
- 04
Risk register
Problems with access, data, reliability or reliance on one person, ranked by importance.
- 05
Written report
What I found, what matters most and what I recommend doing next.
- 06
Debrief
A focused walkthrough of the evidence, questions, tradeoffs, and decisions that remain.
How it works
Review the setup and decide what to change.
- 01
Confirm scope
Agree which tools and workflows to examine, who to speak to and what access is needed.
- 02
Review the current setup
Review the relevant tools, workflows, documentation, costs available to the review, dependencies, and ownership.
- 03
Produce the report
Write up the findings and recommendations, including anything that still needs investigation.
- 04
Debrief
Walk through the report, challenge assumptions, and discuss realistic next-step choices. You decide what to do.
Entry option
External exposure check
¥100,000 + tax
- Up to 3 domains
- Report within 5 business days
- 30-minute debrief
Your domains, email settings, and website already tell the outside world a lot about how your systems are run. This check reads that public picture for you, then tells you what needs fixing first.
What I check
- Email authentication: SPF, DKIM, and DMARC, including whether your policy actually blocks spoofed mail
- Domain and DNS records, and who appears to control them
- Your website platform, visible versions, and plugins
- Login and administration pages reachable from the public internet
- Password rules on public sign-up and login forms
- Certificates and basic site security headers
What it is not
I use only information that anyone on the internet can already see. I do not attempt logins, scan for vulnerabilities, or test your systems, so the check cannot prove that you are secure or that you have been compromised. It shows how much an outsider can learn, and where to start. If the findings point to deeper problems, a full Diagnostics review covers your internal tools, accounts, and ownership.
Start with the automated version
Want to see what the review covers? The Domain Exposure Check explains each part for free: email, registration, the website, PHP version exposure, and breached vendors. It does not show findings for a domain. The full report is ¥5,000 + tax.
Questions
Common questions about the Diagnostics.
What happens after the Diagnostics?
You receive the written report and debrief. You may act internally, take it to another vendor, stop, or separately scope Digital Baseline or Ongoing Stewardship. There is no obligation beyond the Diagnostics.
Is implementation included?
No. Diagnosis and implementation are different kinds of work. Any roadmap or implementation engagement is scoped and priced separately.
How is pricing determined?
Diagnostics starts at ¥158,000 + tax. The relevant system boundary, access, participants, and complexity are confirmed before work begins. The external exposure check is a fixed ¥100,000 + tax for up to three domains.
What does the external exposure check include?
I review up to three of your domains from the outside, using only what anyone on the internet can already see: email authentication, DNS, the website platform and versions, publicly reachable login pages, password rules, and certificates. You get a written report within five business days and a 30-minute debrief. It is not a penetration test, and I do not attempt logins or probe your systems.
More about the work
Want to know more before choosing?
See my work, how engagements run and examples of the documents involved.
Want a clear assessment?
Tell me which systems or workflows need attention, who is affected, and any decision or deadline approaching.
Ask about Diagnostics →