Technology
Cybersecurity
A practical review of your website's security, with clear fixes in order of priority.
01Overview
Reduce your website's security risk, one clear fix at a time.
Most website security problems are not sophisticated attacks. They are outdated software, misconfigured servers, incomplete HTTPS settings, shared passwords and backups that have never been tested. Each one is fixable, but only once someone has looked.
We assess your website and its configuration, explain what we find in plain language, and give you prioritized remediation guidance. Where agreed, we implement the hardening ourselves. No service can guarantee that a website will never be compromised; the aim is to reduce risk and make recovery faster if something does go wrong.
02Scope
What it addresses, and what you receive.
Common problems
- Outdated software and plugins with known vulnerabilities
- Incomplete HTTPS setup and missing security headers
- Shared, unused or over-privileged admin accounts
- Backups that have never been tested
- No visibility of suspicious activity
Typical deliverables
- Website security assessment
- Vulnerability assessment with remediation guidance
- Hardening and security configuration
- SSL/TLS and HTTPS configuration review
- Security headers and access-control review
- Backup and recovery plan
- Basic security monitoring recommendations
What the work covers
Website security assessment
A review of how the site is built, hosted and administered, identifying the weaknesses that matter most for your business.
Vulnerability assessment and remediation guidance
Checks for known vulnerabilities in your CMS, plugins, frameworks and server software, with step-by-step guidance to fix them in order of risk.
Website hardening and security configuration
Secure configuration of the CMS, server and hosting control panel: removing unused components, tightening permissions and disabling risky defaults.
SSL/TLS and HTTPS configuration review
Certificate coverage and expiry, protocol settings, redirects to HTTPS and HSTS, so every page is served over a secure connection.
Security headers and access-control review
Headers such as Content-Security-Policy, X-Frame-Options and Referrer-Policy, plus admin accounts, roles, passwords and two-factor authentication.
Backup and recovery planning
Backup frequency, storage location and retention, with a documented restore procedure that is tested rather than assumed.
Basic security monitoring recommendations
Practical recommendations for uptime and change monitoring, login alerts and log review that your team or host can operate.
The final scope is agreed in writing for each engagement.
03Approach
How the work is done.
Timelines depend on scope and are set out in each written proposal.
Step 1: Scope and authorization
We agree in writing which sites, environments and checks are in scope, and confirm you are authorized to approve them.
Step 2: Assessment
We review software, configuration, HTTPS, security headers, access and backups, using non-intrusive checks unless otherwise agreed.
Step 3: Findings and guidance
You receive a prioritized report: what we found, why it matters and how to fix it.
Step 4: Remediation and re-check
Where agreed, we apply the hardening changes, then re-check that each fix is in place.
04FAQ
Questions, answered.
No. The assessment uses review and non-intrusive checks agreed in advance. Penetration testing is carried out only if separately agreed in writing, with explicit authorization from the system owner, and may involve a specialist provider.
No one can honestly guarantee that. We reduce risk by fixing known weaknesses, improving configuration and making sure you can recover quickly from a tested backup.
Our work can support your compliance efforts, but it is not a compliance audit or certification. Formal audits are provided only if separately agreed, by appropriately qualified assessors.
For configuration reviews and hardening, usually yes. Access is agreed in writing, limited to what the work needs, and revoked when the work is complete.
Related services
All Technology services- TechnologyWebsite MaintenanceYour website kept current, secure and fast, without it becoming your job.
- TechnologyTechnical SEO and Performance OptimizationFaster pages and a cleaner technical foundation for search engines to read.
- TechnologyCustom Web ApplicationsPurpose-built tools for the workflows off-the-shelf software handles badly.
Make Your Next Move Count.
Tell us what needs to move forward with Cybersecurity. We will help define the next step.