Website Security
We read only what your server shows to any visitor: the certificate, the security headers, the versions it publishes, and whether someone can send email on your behalf. Without entering anywhere and without testing anything. No cost.
We use your email to record this test. It does not authorise marketing messages. We delete this test record after 90 days. Privacy notice for the tests
The result appears here: score, findings and what each one means.
How it works
Each finding is confirmed in two minutes with free tools. That’s what separates this from selling fear: we only say what anyone can verify.
Step 1
HTTP headers, certificate, DNS records, and the pages the site serves to everyone. No active testing: without written authorisation that’s a crime, and we don’t do it.
Step 2
Security headers, exposed versions, proper HTTPS, SPF and DMARC so nobody can send email in your name. The site stays the same.
Step 3
The same check, at the end. You get both readings, before and after, and keep the list of what changed.
What you need to do to start: reply to an email with access to your hosting and DNS.
What's included
It’s configuration. Not a code audit or a penetration test, and we say that before charging.
Price
Prices exclude VAT. No lock-in.
390 € once
Everything the check finds in what is public.
29 € / month, optional
To find out the same day if something opens again.
Guarantee
At the end we run the same check. If any finding from the initial list is still there, we fix it free of charge until it disappears. What the check doesn't see, we don't promise.
Who does it
iOutlet, the group's refurbished technology store, runs on the infrastructure we operate. What we sell here is what we do every day for them.
Questions
No. It's a passive check of what the server publishes, and the correction of that. A proper audit looks at the code and access, and has a different price.
No. We read exactly what any browser reads. No access attempts, no scanners, no brute force.
They are two DNS records that say who can send email on behalf of your domain. Without them, anyone can; that's how invoice fraud is done.
Access to the hosting panel (or server) and the domain's DNS. The site itself is not touched.
That's cleanup and recovery, a different job. We tell you right away and quote it separately.
Request
We respond in writing within 48 business hours, with what is needed and the fixed price. No calls.
Passive check: we read headers, certificate and public DNS records, the same as any browser reads. No access attempt whatsoever.