Service 07 of 07
Website Security Audit
Know exactly where your website is weak — before someone else finds out. A detailed, prioritised report, in plain language.
Both start with your service preselected — no need to choose it again.
Why this service
Built around how you work
For a business whose website is already live and who wants to know, without guesswork, where its security weaknesses are — with a report to prove it.
The audit uses passive checks only, on your own website and with your permission. You get an A–F grade, a plain-language explanation of every issue, and a prioritised fix list you can hand to your own developer. Fixes themselves are a separate scope — the audit is the report, not the repair.
A good fit for
Businesses with a live website
Your site is public and handling visitors — you want to know what is exposed before anyone else finds it.
Sites with customer enquiries
Contact forms, bookings, or customer details deserve a check that goes beyond a quick glance.
Businesses planning a big change
Before a rebuild, a redesign, or a new launch, know the weaknesses you are carrying over.
Teams with a developer to apply fixes
The report is written so your developer can work through it — issue by issue, in priority order.
Problems we solve
Sound familiar?
The situations this service exists to fix. If one of these is yours, a conversation is probably worth your time.
You don't know where you are weak
Your site is live, but nobody has ever checked it properly for security weaknesses.
Fixes come without priorities
A list of issues with no order means the urgent ones wait behind the trivial ones.
Reports nobody can act on
Technical jargon that your developer can't turn into fixes is not a report — it is noise.
A quick scan is not enough
A basic grade tells you something is wrong. It does not tell you, in detail, what to fix first.
Concrete deliverables
What you get
- A detailed security audit of your live website (passive checks only)
- An A–F grade, with a plain-language explanation of every issue found
- A prioritised fix list — what to fix first, and what can wait
- A shareable report (PDF/link) you can hand to your developer
- A clear distinction from the free scan: this is the full, detailed audit
Our honest line
We never promise 100% security, and we never test a site we don't have permission for — passive checks on your own site only.
Anything outside the agreed scope gets priced as a separate, agreed phase — never slipped into your invoice.
Pricing guide
Typical pricing & timeline
Website Security Audit
Quoted per scope
Typical timeline: One-time report
These are typical ranges — your final quote comes in writing after we agree the scope. No hidden charges.
Delivery process
How we work
The same four stages on every engagement — adapted to the size of the project.
Share
Share your website URL. The audit runs only on your own site, with your permission.
Audit
Passive checks run against your live site — no port scanning, no aggressive testing, nothing that harms your website.
Report
You get the grade, the issues in plain language, and the fix list in priority order.
Next steps
Apply the fixes with your own developer, or ask us to scope them as separate work. The audit itself does not include fixes.
Related work
We don't have a published portfolio project tagged for website security audit yet. Every engagement follows the same process above — book a call and we'll walk you through relevant past work directly.
Questions
Questions about website security audit
Will my website be 100% secure after the audit?
No — no website is 100% secure, and anyone promising that should not be trusted. The audit tells you exactly where you are weak and what to fix first, which is how risk actually goes down.
Do you test other people's websites or run aggressive tests?
No. Only your own website, with your permission, and only passive checks. No port scanning, no aggressive testing, no hacking, and no extracting anyone's data.
How is this different from the free security scan?
The free scan gives a basic A–F grade and plain fixes you can check yourself. The paid audit is the detailed version: every issue explained, prioritised, and written as a document your developer can work from.
Are fixes included in the audit?
No. The audit is the report. If you want the fixes done, that is scoped and quoted separately.
How much does it cost?
Quoted per scope, one-time — the price depends on the size and complexity of your website. We will say so upfront after a short look at your site.
Have a security audit project in mind?
Tell us what you're building and we'll respond with a clear plan and a fixed cost.