Cybersecurity Scope · Evidence · Remediation
Understand your website’s security risks and what to fix first.
Assessments, hardening and advisory for websites, WordPress and web applications. Start with an agreed scope, get clear findings, and decide the next steps with your team.
Practical support for websites, WordPress and web applications. Review coverage, fixes and retesting are agreed before work begins.
01 Choose your starting point
What do you need to understand or improve?
Review services identify issues. Hardening addresses agreed changes. Advisory helps your team make decisions. These can be combined in a written scope.
Website Security Assessment
Best for: You want an overview of your website’s security concerns.
Review the agreed website configuration, software dependencies and access controls.
Output: Findings with evidence, priorities and recommended actions.
Discuss an AssessmentWordPress Security
Best for: Your team needs help reviewing or securing a WordPress site.
Review WordPress, themes, plugins, administrator accounts and update arrangements.
Output: A WordPress-specific action plan; fixes agreed separately.
Discuss WordPress SecurityWeb Application Security Review
Best for: You are launching or maintaining a custom application.
Review agreed application features, including sign-in, permissions, input handling and data access.
Output: Documented findings for your development team.
Discuss an Application ReviewSecurity Hardening
Best for: You have known issues or settings that need attention.
Make approved changes to reduce unnecessary access and improve the agreed platform configuration.
Output: A change record and agreed verification of completed work.
Discuss HardeningSecurity Configuration Review
Best for: You want a focused review of hosting and administrative settings.
Examine the agreed hosting, domain, encrypted connection and access settings.
Output: Configuration findings and recommended changes.
Discuss ConfigurationSecurity Advisory
Best for: Your team needs guidance on a decision or ongoing priorities.
Discuss application design, supplier choices and security planning around your business needs.
Output: Recommendations and agreed follow-up actions.
Discuss Advisory02 Findings you can act on
Understand the issue and the next step.
For review engagements, the agreed deliverables can include findings, supporting evidence and a prioritised action plan. Changes and retesting are recorded when included in the scope.
Clear outputs for your team
- Findings
- The issue, affected area, evidence and its practical impact.
- Action plan
- Recommended fixes and priorities for your team or provider.
- Change record
- Approved configuration or code changes, where remediation is included.
- Retest record
- What was checked again, the outcome and any remaining actions, where agreed.
03 How we work
Agree the boundaries, then review the evidence.
-
Scope
Agree the systems, permissions, review coverage, timing and expected outputs before work begins.
-
Review
Carry out the agreed checks and document the evidence.
-
Findings
Explain the issues and priorities, with recommended next steps.
-
Remediation, when agreed
Make approved changes or support your existing team in addressing findings.
-
Validation, when agreed
Check completed fixes and record what remains unresolved or outside coverage.
04 Before you enquire
Common questions.
What determines the cost and timing?
What information or access do you need?
Will a review disrupt our live site?
Can you fix what you find?
Do you perform full penetration testing?
How are findings shared, and is ongoing support available?
Your next step
Start with what concerns you.
Tell us what you’re running. We’ll discuss a suitable review scope.