A read-only assessment of your Citrix®, NetScaler® or Azure Virtual Desktop environment
A fixed-price, read-only assessment of your Citrix, NetScaler or AVD environment: scored findings, an expert-reviewed report and a 60-minute readout.
What you get
Scored findings with evidence
Every finding names the rule that produced it, what was observed, what was expected and the vendor documentation behind it.
An expert-reviewed report
A person who runs these platforms reads every finding, removes noise and ranks what to fix first.
NetScaler exposure and upgrade plan
For Citrix + NetScaler: affected CVEs per appliance, CISA KEV status, the fixed build and an upgrade-readiness plan per HA pair.
Cost estimate
For AVD: idle hosts, scaling, disks, licence settings and reservation fit, with an estimate of what each fix is worth.
A 60-minute readout
We walk your team through the findings and the order to fix them. Bring the people who will approve the changes.
30 days of chat over your findings
Ask follow-up questions about your own environment after the readout.
How access works
Nothing is installed by us, and nothing connects in from outside. You stay in control of every credential.
- 1
Scope and paperwork
A 30-minute call to agree scope, then a short agreement. Design partners sign the design-partner terms.
- 2
You create read-only identities
Citrix Read Only Administrator, a read-only Citrix Cloud API client, a NetScaler user limited to show and stat commands, or Desktop Virtualization Reader roles in Azure. We send exact instructions.
- 3
You run the collector
A read-only collector runs inside your network for about an hour and writes a snapshot and a findings report locally.
- 4
You choose what we see
By default we review the findings with you on a screen share, so nothing leaves your network. If you prefer to send the report, secrets are redacted before it leaves the runner.
What the report looks like
A sample with synthetic data. Real reports follow the same structure.
Assessment report: Citrix + NetScaler
Sample environment, synthetic data
4
High severity findings
11
Medium severity findings
9
Low severity findings
- HighNS-CVE-KEV-01
gw-ha-01 runs 14.1-73.37, affected by CVE-2026-88779 (in CISA KEV)
Upgrade the pair to 14.1-73.46. Upgrade-readiness: licensing OK, /var space OK, HA in sync.
- HighCVAD-VDA-REG-03
37 machines in Finance-W11 unregistered since the last image update
Correct the controller list in the image; restart the desktop service on machines with no sessions.
- MediumCVAD-LIC-LAS-02
License server usage upload is overdue
Check outbound access from the license server to the activation service and trigger an upload.
Three fixed-price packages
100% of the assessment fee is credited toward the first year of Advisor or Operator if you sign within 60 days. Prices in USD, excluding tax.
Azure Virtual Desktop
Up to 500 users, one tenant
$2,500
- Read-only collection through ARM, Microsoft Graph and Log Analytics using an app you consent to
- Scored findings across session hosts, scaling plans, FSLogix, networking and images
- Cost-optimization estimate: idle hosts, orphaned disks, licence settings, reservation fit
- Expert-reviewed report and a 60-minute readout
- 30 days of chat over your findings
Design partners: Free for the first 3, then $1,250
Citrix + NetScaler
One site, up to 1,000 users, up to 2 HA pairs
$4,500
- CVAD or DaaS site health through the Broker SDK and Citrix REST APIs
- StoreFront, VDA registration, image and VDA version hygiene, licensing
- NetScaler configuration review, CVE and build exposure for every appliance
- An upgrade-readiness plan for each HA pair
- Expert-reviewed report, 60-minute readout and 30 days of chat over your findings
Design partners: Free for the first 3, then $2,250
Hybrid / Large
Citrix + AVD, multi-site, up to 5,000 users
$7,500 to $12,000
- Everything in both assessments above
- Multiple sites and tenants
- A migration-readiness section (Citrix to AVD, or AVD to Citrix)
Design partners: 50% off
Design partners get 50% off
- The first three assessments of each type are free in exchange for a 45-minute feedback call every two weeks, permission to use anonymized findings statistics, and a reference call.
- After that, assessments are 50% off list: $1,250 for AVD and $2,250 for Citrix + NetScaler.
- Subscriptions are 50% off for 12 months, with the price locked for 24 months.
- No write actions run in your environment until our insurance is bound. Design-partner pilots are read-only.
About a week from access to readout
Day 0
Scoping call, agreement, read-only identities
Day 1
Collector run, about an hour
Days 2 to 5
Rule engine run and expert review
Day 5 to 7
Report delivered, 60-minute readout
Next 30 days
Chat over your findings
Questions
Does the assessment change anything in our environment?
No. It is read-only from start to finish. The identities you create can only read, and the collector has no write actions.
Do you need our admin credentials?
No. You create dedicated read-only identities in your own environment and keep their secrets in your own vault. We never ask for administrator passwords.
What if you find something urgent, like an exploited NetScaler CVE?
We tell you the same day. If you want help, we can run an assisted Emergency Gateway Upgrade with you, with your approval at every step.
Where does our data go?
It stays in your network. The collector writes its snapshot and report locally. By default we review findings with you on a screen share; if you send us the report, secrets are redacted first.
What happens after the assessment?
Many teams fix the findings themselves. If you want the agent to keep watching, the full assessment fee is credited toward the first year of Advisor or Operator if you sign within 60 days.
Can an MSP resell the assessment?
Yes. MSP partners buy wholesale assessments and resell them at their own price, with white-label reports.
Book an assessment
Tell us what you run. A person replies, normally within one business day, to book a 30-minute scoping call.