Your website is the part of your business anyone in the world can reach. If it has grown over years, with plugins added, staff logins never removed and an admin page nobody remembers, it is often the weakest point.
We review websites and web applications with a focus on what could realistically be abused, not theoretical issues.
What we look at
How people log in, and whether passwords, sessions and password resets are handled safely. Who can see and change what, and whether one customer could see another's data. Forms and uploads that could be misused. Server and hosting settings: security headers, certificates, error pages that give too much away. Software and plugins that are out of date. Where the site's data and backups live.
What you get
A plain list of findings, each ranked by how likely it is to be abused and how much it would matter. For each one, what to do about it. If we built or host the site, we usually just fix it. If someone else did, we can fix it or give their developer clear instructions.
Who it suits
Businesses with a site that takes logins, bookings, payments or customer details. Organisations with a bespoke web application that has evolved over many years. Anyone who has been sent a worrying scan report and wants to know what is real.
Looking after it
Sites we host can go on one of our care plans, which keep software and security updates under control month by month and tell you if the site goes down.
Can you check a WordPress site?
Yes. Plugins, themes, admin accounts and hosting settings are where most WordPress problems start.
Will the review take my site offline?
No. We don't run anything that would disrupt a live site without agreeing it with you first.
How much does it cost?
It depends on the size of the site or application. You get a price before we start.
We prioritise the problems that could actually hurt you.