MOAT Cybersecurity
Know exactly what you’re buying.
Straight answers about scope, fees, evidence, and confidentiality.
What do you review?
IT proposals, MSP agreements, renewals, invoices, license exports, and security evidence. We compare the written scope, charges, and available proof, then explain the decision in plain English.
Do you replace our IT provider?
No. MOAT works alongside your existing team. We never sell managed IT, hardware, or software, and never accept vendor commissions or referral payments.
What does the free check include?
An initial read of one proposal or invoice, a short red-flag readout, a missing-document checklist, and an honest recommendation. It is not the full paid review or a security certification.
When does the turnaround begin?
The free check takes 24 business hours after we confirm complete documentation. Verdict Reviews take 3 business days and Rechecks take 2 business days after complete documents and cleared payment. We confirm the delivery date with you; weekends and US federal holidays are excluded.
When do I pay?
After MOAT confirms your documents support a useful review and you approve a written scope. We then provide a private payment invitation. Requesting a review does not authorize a charge.
What if two products have similar features?
Similar features indicate possible overlap, not automatic overbilling. We examine license entitlements, enabled features, coverage, monitoring and response services, and the provider’s explanation before recommending a change.
Do you need access to our systems?
No. Reviews use documents, vendor exports, and passive public DNS information. We never request passwords or log into production systems. Your provider supplies evidence of testing; MOAT evaluates that evidence within the agreed scope.
Does a review establish compliance or security?
No. A CISSP reviewer evaluates security findings within the documentary scope. A verdict does not establish legal compliance, insurance acceptance, legal privilege, or freedom from cyber incidents. Contract redlines are business discussion points for counsel to review.
Are documents used to train AI?
MOAT does not use client documents to train AI models. The website intake does not send documents to an AI service. Any AI-assisted analysis requires an approved business service with contractual no-training controls and an appropriate confidentiality arrangement.
What does ongoing oversight cover?
Quarterly contract-to-evidence reconciliation, screening of unscheduled quotes under $15,000, and an evidence ledger. The written engagement sets volume, entities, review boundaries, and scheduling. It is not unlimited project consulting or real-time security monitoring.
Before you approve it, understand it.
Start with a free Missing-Evidence Check, or talk through your situation.