01Standard2 hr · fixed
02Advanced4 hr · fixed
03Enterprise6 hr · fixed
HEALTH CHECK · UNIFI · 2HR · 4HR · 6HR
A second pair of eyes on your UniFi network.
A scoped, fixed-time review of your UniFi environment. We log in as a temporary admin, walk the topology, read the logs, and produce a written report ranking what we found by importance — with a 15-minute walkthrough on the way out.
Three tiers, by environment complexity. Commercial and residential, same engineers. The breakpoint is simple: if you have cameras, voice, or custom VLANs, you’re in Advanced.
PICKING A TIER
How to choose a health-check tier
One sentence settles most cases. The full per-tier criteria are below if you want to confirm the edges.
If you have cameras, voice, or custom VLANs, you’re in Advanced. If you run multi-site, dual-WAN, or UniFi Access, you’re in Enterprise. Everything else is Standard.The breakpoint
SAMPLE · WHAT YOU’LL GET
See a sample report.
Every Health Check ends with a written report — findings ranked by severity, plus a plain-English walkthrough. A synthetic exemplar is published so you can see the format and depth before you commit.
THREE TIERS · BY ENVIRONMENT
Standard. Advanced. Enterprise.
Each tier adds two hours and another layer of the UniFi stack. The hourly rate never changes — the tiers describe the environment we’re reviewing, not the engineers we’re sending. Rates are on the pricing page.
Standard
2hours, fixed
remote · written reportA complete review of a single-console UniFi network with a small AP footprint and no advanced segmentation. The right starting point for most residential setups and small offices.
In scope
- Single UniFi console (UDM, UDR, UX, or UCK)
- 1–2 access points
- Network module only — no Protect, Access, or Talk
- Default firewall · basic SSIDs · no custom VLANs
- Single internet connection
Fits when
- Your network is just WiFi + a couple of wired devices.
- You have no cameras, no door access, no UniFi phones.
- You inherited a setup and want a sanity check.
Advanced
4hours, fixed
remote · written reportFor environments where the UniFi stack has grown past Network alone — cameras, phones, IoT segmentation, or custom firewall rules. Single site, single ISP, but more surface to inspect.
In scope
- 3–8 access points
- Custom VLANs · IoT or guest segmentation
- UniFi Protect (cameras) and/or UniFi Talk (voice)
- Custom firewall rules
- Single site · single ISP
Fits when
- You have cameras, phones, or any custom VLANs — that alone puts you here.
- Your office has 3+ APs across multiple rooms or floors.
- You have an IoT or guest network that needs to stay separate.
Enterprise
6hours, fixed
remote · written reportFor environments running the full UniFi stack with high-availability requirements: dual-WAN failover, gateway redundancy, multi-site VPN, UniFi Access on doors, and the kind of firewall policy that needs an actual diagram to explain.
In scope
- 8+ access points or multi-site
- UniFi Access (door access)
- Dual-WAN · failover · HA gateway
- Site-to-site VPN
- Advanced firewall and segmentation policy
Fits when
- You run more than one site under a single console.
- Uptime matters — failover and redundancy are configured.
- UniFi Access controls the doors.
WHO IT’S FOR
Commercial and residential.
Same engineers, same methodology, same written report — whether the console runs an office, a school, a non-profit, or a home with a UniFi rack in the basement.
Offices, schools, non-profits.
Inherited environments are the rule, not the exception. We arrive without ego and without a sales agenda — just to find out what’s actually running, what’s drifted, and what’s costing your users their afternoon. Most commercial sites land in Advanced; the larger ones with HA and multi-site sit in Enterprise.
Typical fit · Advanced — 4 hours, fixed
Homes with real UniFi installs.
When an A/V vendor or a previous installer left you with a UniFi setup and you want a senior network engineer to sanity-check it — this is the right call. Most homes land in Standard. Larger homes with cameras, IoT segmentation, or multiple floors of APs land in Advanced.
Typical fit · Standard — 2 hours, fixed
HOW IT WORKS
The health-check protocol
The Health Check is read-only by design: we back up, we read, we write it down. We do not change anything — that’s the point. The report tells you what we found and what to do about it.
01
You request a tier.
Pick Standard, Advanced, or Enterprise. Tell us what UniFi modules are in play, how many APs, and whether anything is broken right now. We confirm the scope by email within one business day.
02
You grant temporary admin access.
You add a temporary admin to your UniFi controller (admin@shiftctrl.net). The grant lasts only as long as the engagement. We never store credentials.
03
We back up the controller.
Before reading anything, we take a controller backup and upload it to your storage. The backup is yours — a clean restore point in case anyone makes changes after the engagement closes.
04
We investigate.
Topology, devices, logs, firmware drift, AP density, RF behavior, segmentation, firewall rules, IDS/IPS posture, backup discipline.
05
You receive the report and a walkthrough.
Written findings ranked by importance. Recommendations from no-cost (config, log rotation) to capital (hardware refresh). A 15-minute Google Meet walkthrough so the report doesn’t become another PDF nobody reads. If you want anything in the report acted on, that’s a separate engagement.
Frequently Asked Questions
The Health Check is intentionally narrow in scope.
What if my environment is bigger than the tier I picked?
We check that during scoping. If your setup needs more time, we tell you before invoicing — never after. Beyond Enterprise, the work is quoted line-by-line as a project engagement.
Do you fix what you find?
No. The Health Check is read-only — we do not make changes during the engagement. The report tells you what we found and ranks the recommendations. If you want any of them acted on, you can hire a remote-hours block or a project quote.
Is this remote-only?
Yes. The review runs through the UniFi controller, with a 15-minute Google Meet walkthrough at the end.
What do you actually deliver?
A written report with findings ranked by importance, recommendations from no-cost to capital, the controller backup we took at the start, and the 15-minute walkthrough. The report is written so a non-engineer can act on it.
How do I add a Health Check to a project I already booked?
Tell us during scoping and we’ll fold the Health Check time into the project quote. A project engagement already wraps up with a full account of what was done, so a separate Health Check is rarely needed once it ships.
Can I buy more hours later if something comes up?
Yes. For small follow-ups, see our remote engineering hours on the pricing page. For larger remediation, we’ll quote it as a fixed-price project.
BOOK A HEALTH CHECK
A scoped review, on a fixed schedule.
Tell us which tier matches your environment and send a topology screenshot. We confirm scheduling within one business day — a fixed-time, fixed-price review, no discovery calls.