IT and security assessments for small businesses, by a certified security engineer.
MercIT Labs is a one-person practice for businesses of 1 to 20 people with no IT staff: a scored look at where you stand, the fixes done properly, and a part-time IT department after that. Nearly two decades of building and running enterprise systems, sized for your business.
- Who it’s for
- Businesses of 1 to 20 people without IT staff
- Where it starts
- A scored assessment, $1,500 for up to 10 people
- Who does the work
- The engineer you email, from the first call to the fix
Assess, fix, keep it right.
-
1
Onboarding assessment
A scored review of your IT and security: accounts, email, devices, backups, your website, and who can get into what. You get the score, the evidence behind it, and a list of fixes in priority order. Run on MercScope, the assessment platform the practice built for its own work.
- Up to 10 people
- $1,500
- 11 to 20 people
- $2,500
-
2
Set it up properly
The fixes, done by the person who found them: your domain and business email set up to block others from sending mail in your name, a website kept to current security practice and registered to you, and software built around how your business works when off-the-shelf won’t do.
- Website and email 5 to 10 pages
- $2,500
- Other fixes
- Quoted in writing
-
3
A part-time IT department
A monthly plan for advice and upkeep: which tools to buy, new people set up, two-step sign-in and backups kept working, policies written down, a review every quarter. Written updates, scheduled calls, fixed hours, all remote.
- Essentials
- $1,500 a month
- Standard
- $2,500 a month
- Security lead
- $3,500 a month
Selling to the Defense Department?
Small suppliers to the Defense Department have to meet CMMC 2.0. The practice runs readiness reviews against it: which controls you meet, which you don’t, and what to fix first, scored in MercScope against the CMMC 2.0 controls with the evidence behind every score. Readiness reviews are quoted after a short scoping call; ongoing security work runs on the Security lead plan, $3,500 a month.
Built, not just described.
The practice builds its own tooling. MercScope is the assessment platform used for its own engagements: control catalogs, evidence, and reporting in one system instead of six spreadsheets, with industry packs for IT security, 3PL logistics, healthcare practices, physical security, and HR compliance. SafeShare is self-hosted secure file sharing, open source and auditable by anyone who wants to read it.
MercScope isn't hypothetical: it's the system every assessment above runs on. Two of the three products on this site exist because the work needed them.
Contact
Starting with an assessment, a website, or ongoing help? Email goes straight to the engineer who would do the work. No forms, no funnel.
contact@mercitlabs.comTaking new clients starting March 2027.
Not ready for a conversation? Start with the credentials and experience →