Service • Website security

Your website is a public door. Make sure nothing is left unlocked.

An independent security audit of your website, delivered as a clear, client-ready report. You see what customers and search engines can actually read, what could be exposed or exploited, and the fixes ranked by how urgent they are — so you know what to do first, in plain language.

Why it matters

A website is one of the few things about your business everyone can see.

Your website is a storefront that never closes. It carries your contact details, your prices, your reviews, and often a way for customers to reach you. If any part of it is exposed, that exposure is available to everyone — including the people who look for weaknesses before your customers do.

The problems are rarely dramatic. They are the quiet gaps: an old plugin left behind, a setting that leaves private information visible, a file a visitor should not be able to read, a form that accepts more than it should. Individually none of them looks urgent. Together, they decide how much trust your website actually earns.

A security audit makes the invisible visible. Instead of hoping your site is safe, you have a documented answer: what is exposed, what it could lead to, and what to do about it first. That is a conversation you can have with a web developer, an accountant, or an insurer — with a report in front of you, not a feeling.

What you get

A report your whole business can read.

Not a log of technical errors. A short, professional report a business owner can open, understand and act on, written so it stands up as evidence when it matters.

  • What is actually exposed to visitors and search engines
  • Each issue ranked by how urgent it is
  • Plain-English explanations of why each one matters
  • A clear list of what to fix first, and what can wait
  • Something to hand to your developer with a shared understanding
  • A dated record that your site was checked and cared for
The real cost of waiting

The risk is not the hack. It is the trust you lose.

Most small businesses will never experience a dramatic security incident. The cost is quieter and it comes earlier. Customers notice when a site feels a little off. Search engines notice before customers do. A known weakness left unfixed can sit between your website and the ranking it should have.

And when something does go wrong, the cost is measured in hours: lost enquiries, a broken checkout, an apology to a customer, and a developer who needs to be briefed from scratch on what was wrong. An audit turns that into a short, prioritised list you can act on while the problem is still small.

For a business that runs on its website, that difference — finding the issue in a week or finding it in a crisis — is usually the whole argument.

Who it’s for

For any business that lives on its website.

Local businesses, ecommerce stores, tradespeople, clinics, restaurants and service providers — anyone whose website takes enquiries, bookings or orders, and anyone who would rather know the state of their site than discover it.

It is also a sensible check before a launch, a rebrand, a new marketing push, or handing the site to a new developer. A current audit report is one of the cleanest ways to understand what you have.

What it looks like

A clear, client-ready report — not a wall of technical errors.

Every audit is delivered the same way: a short, professional report a business owner can open and act on, with each issue ranked by urgency and explained in plain language. These are illustrative examples of the kind of report and findings overview you will receive.

Illustrative client-ready website security audit report: a clean printed document with a charcoal masthead, a muted severity legend and a slim pen on an ivory desk
The report: a short, professional document your whole business can read, with a clear severity legend.
Illustrative findings overview: a clean abstract dashboard with a small bar chart and three muted severity indicators in amber, terracotta and sage-grey on ivory paper
The findings overview: each issue ranked by how urgent it is, in one calm, legible view.
Illustrative review setting: a closed laptop, a neat stack of audit documents and a small ceramic coffee cup on a warm ivory desk in soft natural light
The review: a clear picture and a list you can act on, or hand straight to your developer.
FAQ

Questions about website security audits.

Is my website actually at risk?
Most websites have at least some exposure, even ones that look and work perfectly. The value of an audit is knowing what is exposed and how urgent each issue is, rather than assuming everything is fine.
Will the audit slow my site down or change anything?
No. The audit is read-only. It checks what is publicly reachable without altering your site, its content, or how it behaves for your customers.
What will the report tell me?
A short, plain-English report: what is exposed, why each issue matters, and a prioritised list of what to fix first. It is written to be shared with a developer, an accountant, or an insurer.
Do I need to understand the technical side?
No. The report is written for a business owner. You get a clear picture and a list you can act on or pass to your developer, without reading a line of code.
How often should I get an audit?
At least once a year, and again after any significant change — a new website, a relaunch, or new functionality. Security is a moving target as your site and its software change.
What do you need to get started?
Just the address of the website to review. There is no setup on your side, and you can tell me if there are any pages or areas that are private.

Know the state of your website.

Send the address of the site you would like reviewed. You will get a clear, prioritised report you can act on — or hand straight to your developer.

Request a security audit
Contact

Let’s talk about your next project.

Need a clearer brand, a better website or help getting your marketing moving? Tell me a little about your business and what you have in mind.

Submitting opens your email app with your message ready to send. Your details are used only to respond to your enquiry and are never shared or added to a mailing list.