Security for FFLs, ranges and manufacturers

Cybersecurity built for the firearms industry.

An independent security assessment of the systems your business actually runs on, with evidence for every finding and a plan for what to fix first.

$995 standard scope · Fully remote · Works alongside your IT provider

2A Cyber Check · Report Illustrative sample
Overall security posture Needs attention
Findings by severity
Critical
3
High
7
Medium
9
Low
5
Top priority · F-01 · Critical

Administrator accounts do not require phishing-resistant MFA.

Evidence: Conditional access export: 3 of 3 global admins excluded from MFA policy.

Recommended next step

Secure privileged identities first.

Fictional business · 10 areas reviewed View Sample Report
  • Principal-ledJosh Schubring leads every engagement
  • CPP · CISSPCertified security professional
  • 30+ yearsCyber, physical and operational security
  • Backed by SGSSchubring Global Solutions, an established security services firm

Why this industry is different

Generic IT security was not written for a business that sells firearms.

01

Counter systems and records

POS, inventory, electronic A&D records and eForm 4473 workflows sit at the center of the day. When the systems behind them are compromised or locked, the counter stops.

02

Banking and payment relationships

An incident that touches your processor, your bank or your online checkout can turn into a bigger business problem than the incident itself.

03

E-commerce and customer identity

Online firearm and accessory sales bring customer accounts, fraud, payment data and third-party plugins into scope.

04

Manufacturer IP

CAD files, product development data, dealer pricing and supply-chain details are worth protecting from competitors and criminals alike.

05

Vendor access

MSPs, POS providers, e-commerce platforms, accountants and specialist software vendors quietly accumulate access over the years. We find out who still holds a key.

2A Cyber Check

$995

Standard scope · fully remote · who it's for

A fixed-price assessment with a real deliverable.

Ten areas reviewed, from Microsoft 365 and MFA to backups, payments and vendor access. You keep the report whether or not you hire us for the fixes.

  1. 01

    Executive summary

    Where you stand, in plain language, on one page.

  2. 02

    Risk severity

    Every finding rated critical, high, medium or low.

  3. 03

    Findings with evidence

    What we saw and where, so nobody has to take our word for it.

  4. 04

    Prioritized remediation plan

    What to fix, ranked by risk removed per dollar spent.

  5. 05

    Order of operations

    A sequence your team or ours can follow week by week.

  6. 06

    Readout call

    We walk you and your IT contact through it and answer questions.

After the assessment

Assess. Remediate. Stay protected.

Every engagement starts with evidence. You see what we found and what it costs to fix before committing to anything larger. Stop after any step.

  1. Step 01 · Assess

    2A Cyber Check

    $995 standard scope · One-time

    Understand your risk.

    A remote review of the systems a firearms business actually runs on, with an executive report and a prioritized fix list.

    How Check works
  2. Step 02 · Remediate

    2A Cyber Harden

    $3,500 to $10,000 project · Project

    Fix what matters.

    Remediation scoped from your Check findings and priced separately, alongside your IT provider or instead of them: MFA, email authentication, backups, endpoint protection, access cleanup.

    How Harden works
  3. Step 03 · Protect

    2A Cyber Guard

    $750 to $2,500 per month · Recurring

    Stay protected.

    Managed detection and response backed by a 24/7 Security Operations Center, with analyst-led investigation and a documented escalation process for your business.

    How Guard works

Already know you need 24/7 managed protection? Talk to us about Guard.

Your IT provider

We work with your IT team, not around them.

You do not need to replace anyone. The Check is an independent assessment; who fixes the findings is your call.

  • Option A

    Your IT provider fixes them.

    Findings come with evidence and clear steps any competent team can act on.

  • Option B

    2A Cyber fixes them.

    A fixed-price Harden project, quoted from your findings.

  • Option C

    Both, together.

    We take the security-specific work; your provider keeps running your systems day to day.

Who you work with

Principal-led. Certified. Not a sales channel.

Josh Schubring, CPP, CISSP

Founder and principal security advisor · President, Schubring Global Solutions

More than 30 years in security leadership across cyber, physical, operational, investigative and crisis security, including direct advisory work with leadership teams and boards.

CPP
Certified Protection Professional
CISSP
Certified Information Systems Security Professional

2A Cyber is backed by Schubring Global Solutions, an established cybersecurity and physical security services firm.

  • Principal-led. You work with the accountable decision-maker, not a handoff to a junior delivery team.
  • Independent assessments. Check recommendations follow the evidence. We say what a control has to do, not which brand to buy, and you are never required to buy our other services.
  • Converged perspective. Decades across cyber, physical and operational security means we notice where they connect, and say so. The Check itself is a remote cybersecurity assessment.

Know where you're exposed before someone else finds out.

A 2A Cyber Check gives you an independent view of your security posture, the evidence behind every finding, and a prioritized plan for what to fix first.