Free
Security call
30-minute call to understand what prompted your concern and which paid tier fits.
Book a Free Security CallIndependent cybersecurity assessments
You got a security questionnaire, insurance renewal, or compliance deadline.
We help small businesses figure out what applies, review Microsoft 365 and other controls, and leave you with written findings and a clear next step — starting with a free 30-minute call.
Fixed pricing
Written findings
Avon, CT
Remote nationwide
What brought you here?
Pick the situation closest to yours — we'll point you to the right page.
A customer sent us a security questionnaire
Map what they're asking for to your current controls and evidence.
Book a Free Security Call →Our cyber-insurance renewal asks for proof of controls
Check whether you have documentation for MFA, backups, and incident response.
Review insurance readiness →We use Microsoft 365 and need MFA or admin access reviewed
Fixed-price Snapshot ($750) or Fix-Up ($1,500) for tenant identity and email security.
View Microsoft 365 services →We want our first formal risk assessment
Baseline or full framework review with written findings and a remediation roadmap.
Compare assessment tiers →Where to start
Three entry points. Full tier comparison, pricing, and deliverables are on the assessments page.
$750 – $1,500
Microsoft 365
Snapshot for findings or Fix-Up for findings plus up to 2 hours of hardening.
View Microsoft 365 services$500 – $2,500+
Framework assessments
Baseline through full framework review — HIPAA, FTC Safeguards, NIST, insurance, and questionnaires.
Compare assessment tiersWhat you receive from a full framework audit
A structured audit package designed for executives, IT teams, and compliance reviewers.
Sample findings excerpt — illustrative only
| Control | Finding | Severity | Owner | Due | Status |
|---|---|---|---|---|---|
| AC-2 | Privileged accounts lack documented review process | High | IT / HR | 30 days | Open |
| IA-2 | MFA enforcement gap for remote access | High | IT | 14 days | Open |
| CP-9 | Backup restoration testing documentation gap | Medium | IT | 60 days | Open |
| AT-2 | Security awareness training records incomplete | Low | HR | 90 days | In progress |
Illustrative sample only. Your report will reflect your organization's specific controls, findings, and remediation assignments.
About Root Command IT
AJ Jones, Founder
AJ Jones founded Root Command IT after ten years in network and security operations and two years performing security reviews and audits for small businesses. Assessments focus on insurance renewals, customer questionnaires, Microsoft 365 tenant risk, and framework readiness — with findings mapped to evidence and requirements.
10 years network & security
2 years security reviews & audits
Microsoft 365 & identity
Framework gap assessments
Connecticut-based
Ready to talk it through?
Tell us what prompted the call. In 30 minutes we'll tell you what applies and whether a Snapshot, Fix-Up, baseline, or framework assessment makes sense.