Problem
Small security gaps often go unnoticed
- email without correct SPF/DKIM/DMARC lands in spam or gets spoofed
- outdated TLS config or missing security headers go unnoticed
- publicly visible login or admin paths attract automated attacks
Security check
An external security check of your website
A non-intrusive external review of your website and domain security basics. You get a clear report with findings and priorities — a check with advice, not hardening and not a penetration test.
Solution
A clear external baseline
I check the most common security basics of your domain and website from the outside, without breaking in. You get a report with findings, a risk estimate and concrete, prioritised recommendations — including advice on how to set up monitoring.
Fixed price Website security check €299: non-intrusive external baseline + report. Access-dependent checks (MFA, backups, admin accounts, plugin hygiene) and actually fixing findings are a separate quote. Network/port scans only with written permission.
All listed prices exclude 21% VAT.
Practical
What the baseline (€299) looks at
Domain & email
DNS, SPF/DKIM/DMARC and TLS/SSL configuration of your domain.
Website headers
Security headers and publicly visible login/admin paths.
Version exposure
Publicly detectable CMS/plugin versions (where applicable).
Audience
Who is this useful for?
- SMEs that want to know whether their website and email basics are set up securely.
- Businesses using email on their own domain that want to prevent spoofing.
- Owners who want a sober external check before investing further.
Outcome
What you get
a clear report with prioritised findingsa realistic risk estimate per itemconcrete, actionable recommendationsadvice on a sensible monitoring setup
Curious how your website and email basics score?
Send the domain you want checked (you confirm you are the owner or have permission and consent to the external checks). You get a clear report with priorities.
FAQ
Frequently asked questions
Is this a penetration test?
No. This is a non-intrusive external check of the security basics, with a report and recommendations. It is not a penetration test, not a NIS2 audit and not continuous monitoring — for the latter I advise on how to set up monitoring.
What is not included in the fixed €299 price?
Access-dependent checks (such as MFA, backups, admin accounts, password policy, recovery and plugin hygiene) require access you provide and are a separate quote. Actually fixing (hardening) findings is a separate service too.
Do you run network or port scans?
Only with your explicit written permission. The €299 baseline is purely a non-intrusive external observation and contains no active network or port scans.
Does this guarantee my site is secure?
No. A one-off check is a snapshot and no guarantee that no vulnerabilities exist. You do get a clear view of the main issues and how to address them.
Which domain may I submit?
Only a domain/website you own or that you have written permission to have reviewed. You confirm this with the request; it applies to all checks, including the external ones.