IT support, cloud and security · delivered in 3 days
This package gives you a full, non-destructive review of your website's exposed security weak points, summarised in a professional PDF you can act on straight away.
Price: $18.99. Turnaround: 3 days.
Many small business sites and developer projects carry avoidable security gaps that stay hidden until someone exploits them. This service looks for the most common of these issues before that happens.
We run a professional, hands-off audit of your website and hand over a readable PDF that lists every issue found, together with practical steps to resolve each one.
The audit looks at:
SSL/TLS setup — confirming your certificate is valid, properly configured, and not leaving visitors open to downgrade attacks.
Security header gaps — checking for the presence and correct setup of protections like Content Security Policy, X-Frame-Options and Strict-Transport-Security, which are frequently missing yet simple to add once flagged.
Publicly reachable sensitive files — hunting for configuration files, backup archives, admin paths or other items that should be hidden but are accidentally exposed.
Account enumeration risks — testing whether login or registration pages reveal which usernames or emails exist, a weakness attackers often use as a starting point.
Every check stays strictly non-intrusive: no destructive attacks, no denial-of-service attempts, no unauthorised access of any kind, and nothing goes beyond the scope you agree to.
The resulting PDF report is written so both non-technical owners and developers can follow it. Each issue carries a severity rating, a plain explanation, and a concrete recommendation for fixing it.
This suits small business owners seeking reassurance, developers finishing a build or handover, and anyone who wants to catch weaknesses before someone else does.
Note: you must be the website's owner or hold written permission from the owner before we proceed. This condition is firm and protects both sides.
Your order opens its own thread here the moment it is paid, and everything about that order - questions, changes and the final report - happens in it.
The PDF covers every area reviewed: SSL/TLS setup, missing or misconfigured security headers, exposed files or folders, and account enumeration weaknesses. Each item comes with a severity rating, a plain explanation of the risk, and a clear suggestion for fixing it.
No. Every check is fully non-intrusive. We avoid destructive tests, denial-of-service attempts, or anything that might disrupt your site or its visitors. The review is passive and observation-based throughout.
Yes. The report is written so a business owner without technical knowledge can read it and take action. Each issue is explained plainly, and the fixes are practical steps rather than technical jargon.
No access to your server or hosting account is needed. We only require your site's public web address and confirmation that you own it.
You need to confirm, in writing, that you own the website or have written permission from its owner to request this audit. This is a legal and ethical necessity, and orders without this confirmation cannot proceed.
Any publicly reachable website can be audited, whatever platform it runs on — WordPress, Shopify, a custom build, or otherwise. If it has a live web address, we can review it.
This service excludes penetration testing, exploit creation, SQL injection checks, cross-site scripting exploitation, or any active attack simulation. It focuses purely on a non-intrusive look at common surface-level issues.
A follow-up check after fixes is not part of the standard package, but you can place a fresh order once the recommendations have been applied. For ongoing checks, our subscription option may be a better fit.
Google Workspace setup for your domain with MX, SPF, DKIM and DMARC records configured, delivered in 1 day, with packages for migration and larger teams.
End-to-end VPS setup: Docker, Docker Compose and self-hosted n8n installed, hardened and configured on your Ubuntu or Debian server, with webhooks, backups and full documentation.
We containerise your Node.js, Next.js or Rust app with Docker and set up a CI/CD pipeline so builds, tests and deploys run automatically from your repository instead of by hand.
Fixes email deliverability by configuring SPF, DKIM and DMARC records, cleaning blacklist entries and improving sending reputation, with options for AWS SES repair and migration to platforms such as Microsoft 365.
A downloadable PDF ebook that guides beginners through ethical hacking fundamentals up to advanced penetration testing techniques.
Weekly retainer support for founders and consultants, covering calendars, inboxes, meetings, research, travel and vendor contact, with 5, 10 or 20 hours of help per week.
