Step 3: Fix

Fix what matters most.

After verification, you decide who does the fixing. Fortly does not require you to use us for remediation. The findings are yours to act on, however you choose.

Book a scope call

Your options after verification

Three ways to act on your findings.

Fix it internally

Use the findings and evidence register as a worklist for your own team.

Use your existing IT provider

Your MSP or IT team can use the report and prioritised findings to perform remediation. No changes needed on your side.

Ask Fortly to help

Fortly can help with selected remediation where it makes sense. This is entirely optional.

What Fortly remediation covers

Where you choose to work with Fortly, remediation is focused and practical:

Identity and privileged-access hardening
MFA and Conditional Access improvements
Guest and account cleanup
Application permission governance
Administrative privilege reduction
Selected Microsoft 365 exposure fixes

Scope

Fixed scope after findings are agreed. Fortly does not publish a detailed remediation price list, because the right scope depends on what verification found in your environment.

Your choice

Remediation is never mandatory. If your existing provider can do the work, that is often the best outcome, and the report is written so they can use it directly.

One supported re-scan within 30 days is included with every Verified Exposure Scan, for the same agreed scope.

Find. Fix. Verify.

Findings identify what to fix. Remediation fixes it, whoever does the work. The re-scan verifies the result, so you know the change actually landed.