A security scan of your site or system with your written permission: we look for common vulnerabilities, rank them by severity and explain how to close them. We can fix them and scan again if you like.
Common holes in forms and sign-in are exploited every day.
Incomplete server settings expose data that shouldn't be visible.
A breach costs far more than a scan: data, reputation and downtime.
Common vulnerabilities per OWASP Top 10.
Server, certificates and security headers.
Sign-in, roles and sessions.
We close the holes and confirm.
Everything is written in the proposal before we start, and handed over in your name.
Ranked by severity.
Clear steps for each issue.
In non-technical language.
In a separate proposal.
After fixes, to confirm.
No finding is ever used outside the report.
You sign the authorisation and we agree what's tested.
Run so it doesn't disrupt your site or visitors.
Each issue with its severity and fix.
We fix on request and scan again to confirm.
And you probably need it if
No. Only sites and systems the client owns, or has written permission from the owner to test.
We agree an approach and timing that won't disrupt the site or visitors before we start.
The scan covers common vulnerabilities and configuration. An in-depth penetration test is a larger service priced by scope.