Skip to main content

Website Security Check

Most websites give away more than their owners realise: an expired setting here, a forgotten admin page there, an email domain anyone can impersonate. None of it needs a login to see.

The Website Security Check looks at your site the way an outsider would, confirms what is actually a problem, and explains what to change in language you can pass straight to whoever runs your website.

What we look at

  • HTTPS and TLS configuration
  • HTTP security headers
  • Website configuration and commonly exposed files and pages
  • Publicly observable web technologies and versions
  • Known vulnerabilities, where there is enough evidence to say so
  • Domain and DNS security configuration
  • SPF, DKIM and DMARC email authentication records
  • Other publicly observable exposure and misconfiguration

What you receive

  • A plain-English summary of where things stand
  • Findings ranked by priority
  • Technical evidence where it helps whoever makes the fix
  • Recommended fixes for each finding
  • A statement of what was covered and what was not

Scope and limitations

  • This is a targeted external assessment, not a full penetration test. It covers what can be observed from outside, without logging in.
  • Nothing is tested directly until scope is agreed and you have given written authorisation.
  • Results are reviewed by a person. There is no instant or automated scan on this site.

Common questions

Do you need access to my website or hosting?

No. The check works from what is publicly visible. If something needs a closer look, we will tell you and agree it with you in writing first.

Will it slow down or break my website?

The checks are light and observational, of the kind any visitor or search engine makes. Anything heavier is only done with your written agreement and at a time that suits you.

Can you fix what you find?

Often, yes, or we can work with your web developer or hosting provider. The report is written so that anyone competent can act on it.

How much does it cost?

It depends on how many sites and domains are involved. Tell us what you have and we will send a fixed quote before any work starts.

Start a conversation

Ready to talk about scope?

Tell us what you would like reviewed and when you need it. We will reply with questions or a proposed scope and a fixed quote. An enquiry is not authorisation to test anything.

Request a quote