Audits
Security audit: is your website well protected?
A security audit checks that your site doesn't offer hackers an obvious way in: certificate and https, outdated software, forms, exposed files, protection of your email against spoofing. We run a surface audit, with no intrusion: it does not replace a penetration test. You receive a readable report with fixes ranked by urgency. The pre-audit is free.
What we check
- Security certificate (https): valid, not about to expire, no mixed content
- Security headers sent by your site
- Visible software: version of your site platform (CMS), plugins and themes, overdue updates
- Forms: secure submission, protection against spam and bots
- Files or pages that shouldn't be public (backups, admin access)
- Your email: settings that stop fake emails being sent in your name (SPF, DKIM, DMARC)
- Access: passwords, two-factor authentication, unused accounts (questions we ask you)
What you receive
You can apply the fixes yourself, or ask us to do it.
A readable report
No jargon: what is solid, what isn't, and why it matters to you.
Fixes ranked
By urgency and effort: what to do today and what to plan.
Good habits
Backups, updates, access: a short list adapted to your business.
What we don't do
We don't try to break into your site, and we don't promise it will be unbreakable: no site is. For a full penetration test or an investigation after a hack, we point you to a specialist.
Frequently asked questions
Which trades do you work with?
Any type of business: shops, tradespeople, restaurants, professionals, small businesses. If your trade isn't in our examples, no problem: everything is made to measure, and we tell you frankly what is feasible.
How much does a project cost?
Everything is set by a free quote, because the price depends on what you need. The quote itemises what is included, with no hidden fees.
How does a project work, and how long does it take?
In four steps: we listen, we quote, we build in small steps while showing you progress, then we launch and follow up. The timeline depends on the project: it is stated in the quote before you sign anything.
I'm not technical. Is that a problem?
No, that's who we're for. We explain each step plainly, without jargon, and train you on whatever we deliver.
What happens after launch?
We train you, then stay available: maintenance if you want it, and updates as your business changes. Your domain name is registered in your name.
Is the pre-audit really free?
Yes. You give us your website address, we study it ourselves and reply in writing within 24 hours. It is not an automatic score, and it commits you to nothing.