Frequently Asked Questions | jITSecure

Question 1

What does jITSecure actually check?

Accepted Answer

Today the free jITSecure scan runs 140+ external checks on your domain -- email authentication (SPF, DKIM, DMARC), TLS certificates, security headers, DNS, exposed services, and privacy disclosures. Zero install, usually a few minutes, free. A device scanner (your computers -- firewall, encryption, patching, antivirus, user accounts -- 68 checks) is coming soon with Managed Essentials. Checks map to common frameworks: CIS v8, NIST CSF, CMMC, and WISP (MA 201 CMR 17.00).

Question 2

Is the scan really free?

Accepted Answer

Yes. The external domain scan, including its website health checks, is completely free -- no install, no login, no credit card, no email required for on-screen results. Managed Essentials starts at $29/user/month and adds managed tooling, continuity, and reporting beyond the snapshot; device scanning is coming soon to it.

Question 3

Will jITSecure fix my security issues?

Accepted Answer

jITSecure scans, scores, and coaches -- it does not remediate. For every issue we find, we provide clear fix instructions your existing team can follow. We also detect misconfigured tools you already own (like Windows Defender) and coach you through configuring them properly. For hands-on remediation of external scan findings (DMARC, security headers, SSL, etc.), our Professional Services team handles it on a fee basis. Contact us for a remediation quote.

Question 4

What are the paid packages?

Accepted Answer

The current SMB ladder is Free Scan, Managed Essentials at $29/user/month, and Cyber Essentials at the current price shown at jitsecure.com/packages. Managed Essentials adds a client portal, patching, RMM, inventory, alerting, and remote access. Cyber Essentials adds 24x7 SOC/MDR, email security, awareness training, daily compliance scanning, and human response.

Question 5

How is jITSecure different from SecurityScorecard or Qualys?

Accepted Answer

Most enterprise security tools cost $25K+/year and only scan externally. jITSecure starts with a free external scan with 140+ checks, then turns the result into managed tooling at $29/user/month or a fully managed security program at the current price shown at jitsecure.com/packages. A 68-check device scanner is coming soon to add an inside view.

Question 6

Will my insurer accept a jITSecure report?

Accepted Answer

jITSecure reports include an estimated mapping to CIS v8, NIST CSF, CMMC, and WISP -- frameworks insurers reference in their questionnaires. Our Insurance Check is a short self-assessment questionnaire that shows which of your answers may not match what insurers typically expect. Coverage decisions stay with your insurer; the report gives you evidence for the external items and a clear list of what to fix before renewal.

Question 7

Do I need to install anything?

Accepted Answer

Not for the external scan -- just enter your domain. The device scanner, coming soon with Managed Essentials, will be a small self-contained program that runs locally on your device for Windows, macOS, and Linux, with your raw data staying on your network.

Question 8

What is Cyber Essentials and do I need it?

Accepted Answer

Cyber Essentials (the current price shown at jitsecure.com/packages) is the managed device monitoring and protection package from Just In Time AI. It includes remote monitoring and management, managed detection and response, security awareness training, and email security. All are configured and managed for you. Cyber Essentials protects your devices on an ongoing basis -- it is separate from remediation of external scan findings, which is handled by our Professional Services team on a fee basis.

Question 9

Can I scan multiple sites or client sites?

Accepted Answer

Yes. The Site Health Check product is designed for developers and agencies managing multiple sites. Plans start at $29/month for 5 sites, $99 for 25 sites, or $249 for 100 sites. Each scan covers security, SEO, AEO, accessibility, and compliance checks. For higher volumes, contact sales.

Question 10

Is my data safe?

Accepted Answer

The external scan only checks publicly visible information (DNS records, HTTP headers, SSL certificates) -- the same data anyone can see. The device scanner (coming soon) is designed to run entirely on your local machine and never transmit raw scan data. Reports are generated server-side and delivered via email. We never sell your data or share it with insurers, advertisers, or third parties.

Question 11

How do I get help?

Accepted Answer

Email coaching@jitaitoolbox.com with questions about your service, portal, billing, installing the agent or your reports. We reply within 1 business day. Support does not include general IT help desk work, such as fixing printers, email accounts or other software.