Website security assessment
Know where your website is exposed, and how to close it.
A focused review of your public website, its CMS and hosting, with a short, prioritised list of fixes.
Why teams call us
Problems this solves
-
01
Outdated CMS and plugins
Unpatched WordPress, plugins and themes are a common route into business websites.
-
02
Admin pages open to the world
Login pages without MFA or rate limits invite password guessing.
-
03
Missing basic protections
No HTTPS everywhere, missing security headers and exposed backup or config files.
-
04
Unclear who manages hosting
Nobody is sure who patches the server, renews certificates or keeps backups.
Our approach
Many businesses do not need a full penetration test for a marketing website, but they do need to know it is not an easy target. This assessment checks the website, its content management system, plugins, hosting and DNS against common attack routes.
The result is a short report with prioritised fixes, written so a non-specialist can follow it, plus the option for our team to make the fixes for you.
What is included
-
CMS and plugin review
Versions, known vulnerabilities and unnecessary components.
-
TLS and security headers
Certificate setup, HSTS, CSP and related headers.
-
Exposed files and paths
Backups, configuration files and directory listings.
-
Admin access review
Login protection, MFA and user accounts.
-
Hosting and DNS checks
Server exposure, email authentication records (SPF, DKIM, DMARC).
-
Backup check
Whether backups exist and can actually be restored.
What you receive
- Prioritised fix list
- Plain-language summary
- Technical details for your developer or host
- Optional fixing by our team
- Re-check after fixes
Technology we work with
- WordPress
- Laravel
- Shopify
- Nginx
- Apache
- Cloudflare
- SPF / DKIM / DMARC
Industries
How an engagement runs
Every engagement starts with a signed agreement and an advance payment as set out in your proposal. Work begins once both are complete.
-
01
Scope
Websites, domains and access agreed.
-
02
Review
External checks and, with access, a configuration review.
-
03
Report
Prioritised fixes explained on a short call.
-
04
Fix and re-check
Optional fixes by our team, then a re-check.
Ready to start? Talk to us directly.
Tell us what you need in a few lines. A specialist replies with next steps and a written proposal before any work begins.
Frequently asked questions
Can't find your answer? Ask us
How is this different from a penetration test?
Do you need admin access?
Can you fix what you find?
Start with a conversation.
Share a few details. A specialist replies with next steps, usually starting with a short call.