What we examine
- HTTPS, redirects and observable security headers
- Public-page access, robots rules, sitemaps and indexing instructions
- Visible forms, spam safeguards and customer paths
- Known administration entry points and public trust information
WEBSITE SECURITY & ACCESS REVIEW
Protect private access. Keep your public website reachable.
Understand which protections are visible, whether customers and legitimate discovery can reach your pages, and what needs owner-authorized verification.
What the evidence means
Every check is marked Verified, Needs correction, Unverified or Not applicable. The report lists tested pages, methods, blocked access and exclusions.
A bot challenge alone does not prove a website is secure, broken or hidden from search. We distinguish protection settings, crawler rules and tool failures.
Private controls need authorized evidence
MFA, roles, server-side abuse controls, hosting rules, backups and recovery require agreed owner-authorized evidence. We describe what remains unverified and what is needed to confirm it.
Deeper work is separately scoped and quoted before approval.
A practical correction plan.
Receive documented findings, priorities, proposed corrections and acceptance checks. Public access screening complements Website Analysis and the included launch verification; the approved quote defines any expanded work.
This is a limited, non-invasive review. It does not include penetration testing, bypassing access controls, compliance certification or a guarantee of security. Customer forms and transactions are not submitted during the public review.
Read or copy the audit standard →