What it found on our own site — and what we did
It scored 94 out of 100. It still found things worth fixing on the site of a business that sells security, and we fixed every one the same day.
None of the five standard security headers was being sent
All five now go out with every page, including a content security policy that names every outside source the site uses.
The server announced its exact software version
The web server now gives its name and nothing else, for every site we host.
Our DMARC policy covered only a quarter of failing mail
We checked eleven days of reports, confirmed every genuine message was passing and applied the policy to all failing mail.
Two typos on the About page
Corrected. The report had also flagged a stray space in our main heading — that turned out to be our scanner's mistake, which we fixed so no client sees it.
Two of nine everyday jobs were automated on the site
Deliberate for now: we take enquiries and bookings ourselves. It is the section of the report most clients act on first.
Want one for
your own business?
Free, read by Simon before it is sent and usually with you within one working day. Then we follow up with our recommendations and what we can do for you.















