No surprises. Not in the bill, not on your website.
Letting someone test your website takes trust. Here's exactly what happens from your first message to the moment every issue is confirmed fixed.
Five steps.
Most small-business engagements go from first call to final retest in two to four weeks.
-
Free first check and call
You send us your website address. Before we talk, we run a light, non-intrusive look from the outside — the kind any visitor's browser could do. On a 20-minute call we share what we noticed, learn how your business uses the site, and answer your questions.
-
Scope, fixed quote and paperwork
We send a short proposal: what we'll test, what we won't, the dates, and one fixed price. When you're happy, you sign a testing authorisation letter and we sign a non-disclosure agreement. Nothing is tested before both are signed.
-
Testing
We test within the agreed scope and time window. Anything that could affect your live site is done at quiet hours or on a staging copy. If we find something critical, we call you the same day with a recommended quick fix.
-
Report and walkthrough
You receive the report, ranked by risk, with a plain explanation and fix for every issue. We walk you and your developer through it on a call, so nothing is left unclear.
-
Fixes and free retest
Your team applies the fixes, or we do. Then we retest every finding at no extra cost and update the report, so you have written proof the holes are closed.
The rules we work by.
Permission first, always
We test only what you own and have authorised in writing. If a test would touch a third party — your payment provider or hosting company — we check their rules first.
Do no harm
We don't delete data, we don't change what we don't have to, and we stop immediately if something unexpected happens to your site.
Minimal data, deleted afterwards
If testing exposes personal data, we look only as far as needed to prove the issue, never copy more than necessary, and delete everything at the end.
Plain words over jargon
If you don't understand something in our report, that's our fault, not yours. We'll rewrite it until it's clear.
Honest advice, even when it costs us
If you don't need a full penetration test, we'll say so. If a quick fix does the job, we'll tell you how to do it yourself.
Step one takes two minutes.
Send us your website address and a line about what it does. We'll take it from there.