Is your website safe from the latest security flaws?
When a major PHP or WordPress flaw hits the news, we tell you in plain English whether you're affected and exactly what to do. Fixed price. No jargon.
Try a free quick check
Only looks at what any browser sees when visiting your homepage. Nothing is tested or attacked.
The risk
Why it matters
Most small business sites run on PHP
WordPress, WooCommerce, Drupal, Joomla and many older custom sites all use PHP. When a big flaw is announced, they can all be targets.
Old versions stop getting fixes
PHP 8.1 and older no longer receive security updates. Many cheap hosting plans still run them.
Attackers move fast
Automated tools scan the internet for vulnerable sites within days of a flaw going public. Small sites are not too small to be hit.
The process
How it works
- 1
Book and sign
Choose an assessment and sign a simple permission form confirming you own the website. We never test without it.
- 2
We take a look
We review your PHP version, CMS, plugins and hosting setup, and check whether current named flaws affect you.
- 3
Plain-English report
Within 3 working days you get a clear verdict: affected or not, how serious it is, and exactly what to do.
- 4
Fix it, your way
Hand the report to your host or web developer, follow the steps yourself, or ask us for a fixed quote. Many fixes are a single setting in your hosting control panel.
Transparent UK pricing
Simple, fixed pricing
No hourly rates, no surprises.
Free Quick Check
See what your website reveals to anyone who visits it.
£0
instant, automated
- PHP version check (if publicly visible)
- HTTPS and security header review
- Server and CMS version exposure
- Results in seconds
Essential Assessment
An outside-in review: what attackers can see, and whether current flaws affect you. No access needed.
£149
one-off, per website
- Outside-in review of 1 website, no logins or access needed
- PHP, CMS and plugin versions (where visible)
- Exposure check for current named flaws
- Clear 'affected / not affected' verdict
- Plain-English report within 3 working days
Full Assessment
Outside-in plus an inside view with read-only access, for a definite answer.
£349
one-off, up to 3 websites
- Everything in Essential
- Inside view: exact PHP, CMS and plugin versions via read-only access
- Checks for altered core files, admin accounts, 2FA and backups
- Up to 3 websites
- Hosting configuration review
- Prioritised fix plan you can hand to your host or developer
- 30-minute call to walk through findings
- Free re-check after fixes
Monitor & Alert
£15/monthper website, or £149/year
- Monthly re-check of your website
- Alerts when a new flaw affects your setup
- Short plain-English summary each month
- Cancel any time
Available after an assessment.
Monitor + Fix
£49/monthper website
- Everything in Monitor & Alert
- We apply WordPress, plugin and PHP updates
- We fix new issues as they're found
- Cancel any time
Available after an assessment.
Fixes, if you want them
After your report, ask us for a fixed quote to fix what we found. It's optional: many fixes are a setting in your hosting control panel, and the report works just as well for your host or developer.
Signed consent first
We never touch or review a website without explicit, written permission from its owner.
Plain English only
No jargon or scare tactics. Just clear explanations, real risk levels and steps to fix.
Fixed-fee guarantee
Every assessment has a firm price up front. No surprise bills, no forced contracts.
Need clarity?
Questions
Do I need any technical knowledge?
No. Reports are written for business owners, not IT people. Every finding says what it means for you and what to do next.
Could the assessment break my website?
No. We use careful, non-disruptive checks, and the assessment never changes anything on your site.
Do you need my passwords?
No for the free check and the Essential Assessment: both only look from the outside. The Full Assessment adds an inside view using temporary read-only access to your WordPress or hosting, or we can work through your web developer.
What if I'm affected?
Your report includes a prioritised fix list with clear steps. Hand it to your host or developer, do it yourself, or ask us for a fixed quote. Using us for fixes is entirely optional.
Can't my host do this for me?
Often, yes. Many fixes, like updating PHP or turning on backups, are a setting in your hosting control panel, and your report tells you exactly which ones. What we add is an independent check against current named flaws, in plain English, with clear priorities.
Why do you need a permission form?
Testing a website without the owner's permission can be illegal. The form protects you and us, and confirms exactly what we'll look at.
Get a straight answer this week
Book an assessment and know exactly where you stand, usually within 3 working days.
Book an assessment