Free PDF guide
Is your website safe? Check it in 15 minutes.
A plain-English 21-point checklist for business owners, plus a hacked-site recovery plan. No technical skills needed.
What you get
21 security checks
Each with why it matters and a short how-to.
Signs you are already hacked
8 warning signs to look for today.
First-hour recovery plan
6 steps to take if the worst happens.
Free tools that work
Scanners and monitors we actually use.
The six areas it covers
Login and access · 4 checks
Stolen or guessed passwords are the number one way into business websites.
Updates and software · 4 checks
Most hacked sites were running software with a known, already-fixed hole.
Encryption and browser protection · 4 checks
These protect visitors and tell browsers and Google that your site is trustworthy.
Backups and recovery · 3 checks
A clean, recent backup turns a disaster into an hour of work.
Email and domain · 3 checks
Your domain is your identity. Losing it, or letting it be faked, hurts your whole business.
Monitoring and forms · 3 checks
You should hear about a problem from a tool, not from a customer.
A sneak peek
Turn on two-factor login for admin accounts
Why: A stolen password alone is no longer enough to get in.
How: WordPress: a 2FA plugin. Hosting, Google and your domain registrar: enable 2-step verification.
Know where you stand
Tick what is done, count your score, and see what to do next.
18-21
Strong
You are ahead of most small business sites. Repeat this every quarter.
12-17
Gaps to close
Fix the missing items, starting with logins, updates and backups.
0-11
At risk
Your site is an easy target. Talk to us and we will fix the essentials first.
Free guide
The website security checklist
PDF · 21 checks · plain English
Prefer a quick test first? Scan your site free
Useful tools
Free tools worth bookmarking.
Included in the PDF, with what each one is good for.
Webcrab Security Scanner
Checks SSL, headers, exposed software and email protection in 10 seconds.
Google Search Console
Shows security issues and hacked-content warnings Google has found.
Qualys SSL Labs
Deep test of your HTTPS configuration and certificate.
Have I Been Pwned
Check whether your email or domain appeared in a data breach.
MXToolbox
Test SPF, DKIM, DMARC and whether your domain is on spam blacklists.
UptimeRobot
Free uptime monitoring with email alerts.
Think your site is already hacked?
Do not wait for the checklist. We contain the damage, clean the site and close the way in.
Get emergency helpFAQ
Common questions.
Yes. Enter your email and download the PDF straight away. We also email you a copy.
Let's build something that lasts.
Tell us about your business. You'll get a written quote with a fixed price within one working day.