Baseline Assessment
inner · questionnaire │ edge · perimeter scan
│
■ □ ■ ■ □ │ · ╭─·─╮
□ ■ ■ □ ■ │ ·(( ● ))·
■ ■ □ ■ □ │ · ╰───╯ ·
□ ■ □ ■ ■ │ · ·
│
CMB │ CBA
// diptych — CMB · CBACBA — The Definitive Expert-Led Cryptographic Assessment
The CMB tells you what you believe your cryptography to be. The CBA reveals what it truly is — and delivers a clear, prioritized plan to close the gap.
Where the CMB surfaces internal blind spots through structured questions, the CBA scans your real perimeter and shows you exactly what an attacker sees. It's the comprehensive, expert-guided engagement that transforms uncertainty into an actionable roadmap.
What You Receive
- An external, attacker's-eye view of your exposure.
- Expert interpretation of every finding.
- A remediation roadmap, prioritized by business risk.
- Clear, confident next steps.
CMB vs. CBA
Questions Only the CBA Can Answer
- Which certificates are exposed?
- Which protocols are negotiable?
- What appears vulnerable to reconnaissance?
CBA — what your crypto actually is, from the outside.
The CMB tells you what you think your crypto is. The CBA tells you what it really is — and where to start fixing.
The CMB finds internal gaps through questions. The CBA scans your real perimeter and shows what an attacker sees. It's paid and takes weeks — it's a real engagement, not a form.
What you get
- An outside view — the attacker's angle.
- Expert read of the findings.
- A fix roadmap, ranked by business risk.
- Clear next steps.
CMB vs CBA
Questions the CMB can't answer
- Which certs are exposed?
- Which protocols are negotiable?
- What looks vulnerable to recon?
CBA — what your crypto actually is.
CMB tell you what you think your crypto is. CBA tell you what it really is. And where to start fix.
CMB find inner hole by question. CBA scan real edge. See what attacker see.
You get
- Outside view — attacker's eyes.
- Expert read of findings.
- Fix roadmap, ranked by business risk.
- Clear next steps.
CMB vs CBA
Questions CMB cannot answer
- What certs are exposed?
- What protocols are negotiable?
- What look vulnerable to recon?
CBA — Cryptographic Baseline Assessment. Expert-led external perimeter scan. Paid engagement.
Spec
CMB vs CBA
Answers only CBA gives
- Which certificates are exposed.
- Which protocols are negotiable.
- What is vulnerable to reconnaissance.