What a Password Health Check covers
A password health check gives you a clear view of how your team is handling access across business systems. We look for weak passwords, repeated use across accounts, ageing credentials, shared logins and any access that should have been removed after a role change or resignation.
The check is practical rather than theoretical. We review what is in use, what is no longer needed and where staff are storing passwords in unsafe ways, like spreadsheets, notebooks or inboxes. For many small teams in Johannesburg, Cape Town, Durban or remote offices, that first audit already shows a few easy fixes. Sometimes more than a few.
Sizes and options for different team setups
We tailor the review to the size of your team and how many systems you rely on. A 5 person business with one admin account and a few cloud apps needs a different approach from a 40 person operation with sales, finance and field teams all using separate tools.
- Starter review: for very small teams with under 10 users and a limited set of applications.
- Growth review: for teams from 10 to 30 users who need clearer permission control and shared account cleanup.
- Multi site review: for businesses with branches in different towns or remote staff across South Africa.
We also work with teams that need help after a staff change, during a new system rollout or before a quarterly access review. If you are still relying on the same shared password for too many systems, this is usually the point where the risk starts to climb.
Where it suits best in day to day operations
Password health checks suit small business teams that use cloud accounting, CRM, project tools, file storage, online banking and internal admin systems. They are especially useful where several people need access to the same platforms, but not all of them need the same level of control.
We often see the biggest gains in offices with hybrid work, staff turnover or outsourced support. If somebody in Pretoria is logging into the same tool as a colleague in Gqeberha, the access rules need to be tidy. If they are not, it becomes difficult to know who can see what and why.
This service also helps where the business has grown quickly and the password habits have not kept pace. A company that started with 3 users can end up with 18 staff and 12 connected services before anyone has formally checked the setup.
How the review is done and what it needs
Most password health checks are completed remotely, which keeps the process simple for teams in Woodstock, Stellenbosch, Century City and nationwide. We only need secure access to the parts of the system being reviewed, plus time with the admin person or manager who knows how the accounts are used.
There is no special power, gas or physical installation needed. You do not need any on site equipment for this service, and it works well whether your team is in one office or spread across several locations. Because the work is remote, load-shedding or local building access usually does not delay the review much, if at all.
- Typical input: admin access to selected systems, staff list and current access structure.
- Typical output: a risk summary, practical fix list and next steps for password and access control.
- Timing: most small team reviews are completed within 1 to 3 working days depending on system count.
Care, servicing and follow up checks
A password health check is not a once off box to tick. Passwords age, staff change roles and new apps get added without warning. That is why we recommend follow up reviews, especially after onboarding new staff, offboarding old staff or adding a new finance or operations system.
For teams that want ongoing support, we can schedule quarterly access reviews and help keep the password rules practical for day to day use. The point is not to make work harder, but to stop bad habits from creeping back in. A bit of discipline here saves a lot of admin later, and less chasing around when someone is locked out on a Monday morning.
Where needed, we also help with training so the team knows what a strong password looks like, when to change it and how to avoid unsafe sharing. That makes the process easier to keep up over time.
What to confirm before you set up access
Before you book a password health check, it helps to be clear about the number of users, the systems in scope and who handles admin access in your business. If you know which tools are most important, we can focus the review where the risk is highest.
- How many users need to be included in the review
- Which applications, banks or cloud tools need checking
- Whether shared accounts are still in use
- Who manages staff onboarding and offboarding
- Whether the business needs a one off review or ongoing quarterly checks
- Whether remote teams need the same access rules as office based staff
If you are not sure where to start, we can help you work through it in plain terms. Most businesses already know they have a few weak points, they just have not mapped them properly yet.
Key facts
| Service type | Password health check and access risk review |
|---|---|
| Best for | Small business teams using shared apps, cloud tools and admin accounts |
| Team size | 5 to 50 users, with custom scoping for larger groups |
| Delivery | Remote across South Africa, with support for Cape Town, Johannesburg, Pretoria, Durban and Gqeberha |
| Typical turnaround | 1 to 3 working days for a standard small business review |
| Follow up options | Quarterly access reviews, offboarding checks and ongoing support |







