Website & Business Systems Security Audit
£650+ VAT
Fixed-scope, fully remote and human-reviewed.
Your website and/or business systems, within a scope agreed before payment.
- Your website and/or business systems, with the exact scope agreed before payment.
- Non-destructive public-site, code, dependency and configuration checks.
- Authentication, permissions, forms, uploads and API-boundary review.
- Manually validated findings with evidence and clear priorities.
- A clear report and a 30-minute call to explain it.
- One limited retest of agreed fixes within 14 days.
A fixed scope, agreed first
We agree exactly which website and/or business systems the £650 + VAT review covers before payment. A standard website review covers one primary domain, one related codebase or WordPress installation, and one production environment. Larger or more complex reviews need separate scoping.
What we review
Depending on the agreed scope, we use non-destructive checks to review your website, its code or WordPress setup, and the access and security settings in business software you are authorised to have assessed. Website checks can cover dependencies, configuration, exposed secrets, authentication, permissions, forms, uploads, API boundaries, HTTPS, security headers and cookies.
What you receive
You receive manually validated findings ranked Critical, High, Medium or Low, evidence for each finding, a plain-English fix-first action plan, a 30-minute remote walkthrough, and one limited retest of agreed fixes within 14 days.
Clear boundaries
The fixed audit excludes destructive testing, denial-of-service, social engineering, third-party infrastructure, compliance certification, incident response and implementing the fixes. No audit can promise to find every possible vulnerability or prevent every future attack.
See what recent AI-agent security incidents mean for an ordinary business website.
Read the practical incident guide →Before you book the audit.
Can you check our website, our business systems, or both?
Yes. Tell us which website and systems you use, and we agree what the £650 + VAT review includes before payment. A standard website review covers one primary domain, one related codebase or WordPress installation, and one production environment. Larger or more complex reviews are scoped separately.
Will you take the website offline?
No. The fixed package uses non-destructive checks. Denial-of-service, destructive exploitation and testing third-party infrastructure are excluded.
Do you fix everything you find?
The £650 fee covers the audit, report, walkthrough and one limited retest. We can quote separately for fixes, or your existing developer can use the action plan.
Does the audit guarantee the website cannot be hacked?
No. We check the agreed areas, verify the findings and explain which fixes need attention first. An audit cannot find every possible problem.