Check the security basics your website depends on
A website can look finished while its forms, connection or account access still need attention. I review security basics as part of building and checking websites, and can quote for agreed improvements to an existing site. The first step is to identify the website, the concern and the access available. This work does not certify that a site is secure or guarantee protection from every attack.
Begin with what can be checked publicly
An initial look can cover HTTPS, browser warnings, security headers and the way public forms handle their inputs. These checks can identify specific improvements, but they cannot reveal every issue inside a hosting account or application.
If you are unsure where to start, use the free website check. It considers visible security basics alongside design, usability and performance, with prioritised findings. It is a useful starting point for deciding whether further work is needed.
Turn a concern into a defined change
Contact forms
Check input handling, spam protection and the messages shown after submission. A success screen and a delivered email are different checks; both matter when the form is your route for new work.
Website and hosting configuration
Review the agreed connection and configuration issues where the platform and available access allow. Existing software, third-party services and the cause of a warning affect what can be changed.
Access and handover
Identify who controls the domain, website and hosting. For the sites I build, files and account access are handed over so ownership does not depend on an ongoing relationship with me.
Know what the review establishes
The quote sets out the checks and fixes being commissioned. Deeper investigation or account-level work needs a separate scope. This is not a penetration test, a compliance audit or an emergency incident-response service.
After agreed changes, I recheck the affected behaviour. A passing check is evidence about that check at that time; it does not make an unsupported claim that the whole website has no vulnerabilities.
Questions about website security work
Can you guarantee my website cannot be hacked?
No. I can explain the checks performed, fix agreed issues and report what was verified. No website should be sold with a guarantee that every attack is prevented.
Do you need my passwords to give an initial opinion?
An initial public website check starts with your website address. Any later account access is discussed only after the work and the access needed are agreed.
Is ongoing security monitoring included?
Do not assume an ongoing monitoring or response contract. Hosting has its own stated inclusions, and any further work must be agreed in the quote.
Get a quote for the work you need
Send your website address and describe the warning or concern you want checked. I reply within one working day.
Related services: Website hosting, Website performance, all services.
Two sites I have built so far are GHZ Accountants and Redpen Jobs: see the work. The demos on this page are fictional concepts.