Website security.

Most small-business sites are hacked through things nobody checks: an old plugin, an exposed file, missing email protection. We check them, with your written permission, and tell you how to fix them in plain language.

Free check · $0

Our public website check. It reads only what any visitor can see.

Run the free check

Security Review

A full review of one website, done with your written permission.

$249 CAD · one-time

HTTPS certificate, security headers and redirects
Exposed files, admin pages and backups left online
WordPress, plugin and theme versions with known vulnerabilities
Email protection: SPF, DKIM and DMARC
PDF report with a prioritised fix plan + 30-minute call

Get started

Review + Fix

The full review, then we fix what we found and test again.

$599 CAD · one-time

Everything in the Security Review
We apply the fixes (updates, headers, DNS, removals)
A second scan to confirm each fix
Before / after report
Needs access to your site or hosting

Get started

Monitoring

A monthly re-check so new problems don't sit unnoticed.

$29 CAD /mo

Monthly scan of the same website
Alert before your certificate expires
Alert when the site goes down
Alert when a new known vulnerability appears
Cancel any month

Get started

Nothing starts without your written permission

Checking a website you don't own, without permission, is illegal in Canada. So before any review we need the authorization form signed by the site's owner (or someone allowed to sign for it), and we confirm you control the domain with an email on that domain or a DNS record. We only test what the form lists, in the dates it lists, and we never try to break in, read your data or slow your site down.

Fill in the authorization form

Questions

Will the review slow down or break my site?: No. We use light, rate-limited checks at a time you choose, and we don't run attacks that change data or take the site down.
What if you find something serious?: We tell you the same day, privately, with the first step to take. The full write-up follows in the report.
My site was built by someone else. Can you still check it?: Yes, as long as the business that owns the site signs the authorization. If another company hosts it, we may also need their OK.