Security audit

A security check of your website and server, with a report you can read.

We look at everything someone outside your office could reach, write down what we found, and sort it into three piles: fix today, fix this month, and can wait.

A shield holding the business’s files, with the last one checked

A person here calls you back the same business day, usually within an hour.

  • Written permission first
  • A report in plain words
  • Checked again after the fix

What we check

The check covers these seven areas.

  • The parts of your systems anyone on the internet can reach
  • Your website’s software and its plugins
  • Your hosting control panels
  • The padlock certificate (TLS) and the security settings your site sends
  • Your domain and email settings: SPF, DKIM and DMARC
  • Who has a login, and whether they use a second sign-in step
  • Your backups

What you get in hand

Every finding is checked by a person before it reaches your report, and we fix what we find.

People check it, people fix it

  • A written report: what we found and how dangerous each item is
  • Each item sorted: fix today, fix this month, or later
  • A short version in plain words, written for you as the owner
  • The technical detail attached, for whoever looks after your systems

How the work goes

Five steps, in the same order every time.

Before any test, you sign a scope letter: what we test, on which dates, who to call, and what we must leave alone.

Your signature comes first

  1. Step 1

    We agree what to check

    A short call, or the form at the foot of this page. Together we decide which website, server or office systems we look at.

  2. Step 2

    You sign the scope letter

    It sets the targets, the dates, the contacts, and what we must leave alone. Work starts only once it is signed.

  3. Step 3

    We check, and write it down

    One report in plain words for you, with the technical detail attached for whoever looks after your systems.

  4. Step 4

    We fix it

    We make the repairs ourselves, or together with your current IT provider or web developer.

  5. Step 5

    We check again

    A second check confirms that each problem is closed.

What we need from you

  • The addresses of your website and your servers
  • One person we can reach while we check
  • Your signature on the scope letter

What it costs

Each job is a different size, so each one gets a fixed quote once the scope is agreed. You see the price in writing before any work starts.

Tell us what worries you.

Leave your name and a number. A person here calls you back the same business day, usually within an hour, and asks what you want checked. Would you rather start on your own? The free audit takes about three minutes.

  • Same day callback
  • Written permission first
  • Fixed quote

Ask us to call you back

Leave your name and number. A real person calls you back the same business day, usually within an hour.

We use your number to call you back about your request. Nothing else.

Call me back