01 · standardStandard · 2 hr$300
02 · advancedAdvanced · 4 hr$600
03 · enterpriseEnterprise · 6 hr$900
// HEALTH CHECK · UNIFI · 2HR · 4HR · 6HR
A second pair of eyes on your UniFi network.
A scoped, fixed-time review of your UniFi environment. We log in as a temporary admin, walk the topology, read the logs, and produce a written report ranking what we found by importance — with a 15-minute walkthrough on the way out.
Three tiers, by environment complexity. Commercial and residential, same engineers. The breakpoint is simple: if you have cameras, voice, or custom VLANs, you’re in Advanced.
// PICKING A TIER
One rule, no guesswork.
Most buyers can pick a tier in fifteen seconds. Cameras, voice, or any custom VLANs — you’re in Advanced. Multi-site, dual-WAN, or UniFi Access on the doors — you’re in Enterprise. Everything else is Standard. The full criteria are below if you want to be sure.
If you have cameras, voice, or custom VLANs, you’re in Advanced. If you run multi-site, dual-WAN, or UniFi Access, you’re in Enterprise. Everything else is Standard.// the breakpoint
// THREE TIERS · BY ENVIRONMENT
Standard. Advanced. Enterprise.
Each tier adds two hours and another layer of the UniFi stack. The hourly rate stays at $150 — the tiers describe the environment we’re reviewing, not the engineers we’re sending.
Standard
$300fixed
2 hours · remoteA complete review of a single-console UniFi network with a small AP footprint and no advanced segmentation. The right starting point for most residential setups and small offices.
In scope
- Single UniFi console (UDM, UDR, UX, or UCK)
- 1–2 access points
- Network module only — no Protect, Access, or Talk
- Default firewall · basic SSIDs · no custom VLANs
- Single internet connection
Fits when
- Your network is just WiFi + a couple of wired devices.
- You have no cameras, no door access, no UniFi phones.
- You inherited a setup and want a sanity check.
Advanced
$600fixed
4 hours · remoteFor environments where the UniFi stack has grown past Network alone — cameras, phones, IoT segmentation, or custom firewall rules. Single site, single ISP, but more surface to inspect.
In scope
- 3–8 access points
- Custom VLANs · IoT or guest segmentation
- UniFi Protect (cameras) and/or UniFi Talk (voice)
- Custom firewall rules
- Single site · single ISP
Fits when
- You have cameras, phones, or any custom VLANs — that alone puts you here.
- Your office has 3+ APs across multiple rooms or floors.
- You have an IoT or guest network that needs to stay separate.
Enterprise
$900fixed
6 hours · remoteFor environments running the full UniFi stack with high-availability requirements: dual-WAN failover, gateway redundancy, multi-site VPN, UniFi Access on doors, and the kind of firewall policy that needs an actual diagram to explain.
In scope
- 8+ access points or multi-site
- UniFi Access (door access)
- Dual-WAN · failover · HA gateway
- Site-to-site VPN
- Advanced firewall and segmentation policy
Fits when
- You run more than one site under a single console.
- Uptime matters — failover and redundancy are configured.
- UniFi Access controls the doors.
// WHO IT’S FOR
Commercial and residential.
Same engineers, same methodology, same written report — whether the console runs an office, a school, a place of worship, or a home with a UniFi rack in the basement.
Offices, schools, places of worship.
Inherited environments are the rule, not the exception. We arrive without ego and without a sales agenda — just to find out what’s actually running, what’s drifted, and what’s costing your users their afternoon. Most commercial sites land in Advanced; the larger ones with HA and multi-site sit in Enterprise.
Typical fit · Advanced — 4 hours — $600
Homes with real UniFi installs.
When an A/V vendor or a previous installer left you with a UniFi setup and you want a senior network engineer to sanity-check it — this is the right call. Most homes land in Standard. Larger homes with cameras, IoT segmentation, or multiple floors of APs land in Advanced.
Typical fit · Standard — 2 hours — $300
// HOW IT WORKS
Investigative. Read-only. Documented.
The Health Check is forensic in posture: we back up, we read, we write it down. We do not change anything — that’s the point. The report tells you what we found and what to do about it.
// 01
You request a tier.
Pick Standard, Advanced, or Enterprise. Tell us what UniFi modules are in play, how many APs, and whether anything is on fire right now. We confirm the scope by email within one business day.
// 02
You grant temporary admin access.
You add a temporary admin to your UniFi controller (admin@shiftctrl.net). The grant lasts only as long as the engagement. We never store credentials.
// 03
We back up the controller.
Before reading anything, we take a controller backup and upload it to your storage. The backup is yours — a clean restore point in case anyone makes changes after the engagement closes.
// 04
We investigate.
Topology, devices, logs, firmware drift, AP density, RF behavior, segmentation, firewall rules, IDS/IPS posture, backup discipline.
// 05
You receive the report and a walkthrough.
Written findings ranked by importance. Recommendations from no-cost (config, log rotation) to capital (hardware refresh). A 15-minute Google Meet walkthrough so the report doesn’t become another PDF nobody reads. If you want anything in the report acted on, that’s a separate engagement.
// FAQ
Common questions.
The Health Check is intentionally narrow in scope — these are the questions buyers ask before booking it.
// 01
What if my environment is bigger than the tier I picked?
We check that during scoping. If your setup needs more time, we tell you before invoicing — never after. Beyond Enterprise, the work is quoted line-by-line as a project engagement.
// 02
Do you fix what you find?
No. The Health Check is read-only — we do not make changes during the engagement. The report tells you what we found and ranks the recommendations. If you want any of them acted on, you can hire a remote-hours block or a project quote.
// 03
Is this remote-only?
Yes. The review runs through the UniFi controller, with a 15-minute Google Meet walkthrough at the end.
// 04
What do you actually deliver?
A written report with findings ranked by importance, recommendations from no-cost to capital, the controller backup we took at the start, and the 15-minute walkthrough. The report is written so a non-engineer can act on it.
// 05
How do I add a Health Check to a project I already booked?
Tell us during scoping and we’ll fold the Health Check time into the project quote. Project engagements include a close-out report by default, so a separate Health Check is rarely needed once the project ships.
// 06
Can I buy more hours later if something comes up?
Yes — the same $150/hr rate applies to follow-up work. For small follow-ups, see our remote engineering hours. For larger remediation, we’ll quote it as a fixed-price project.
// BOOK A HEALTH CHECK
A scoped review, by Friday.
Tell us which tier matches your environment, send a topology screenshot, and we’ll confirm scheduling within one business day. No long calls, no discovery theater — just a fixed-time, fixed-price review.