A website audit with a clear action plan
Your website isn’t bringing in enquiries, and it’s not clear why? An audit answers that with facts. We check speed, SEO, security and usability. Instead of a long technical report, we tell you what to fix first and what you’ll get out of it.
€ 390 From
When a website audit pays off
WHO IT’S FOR
Businesses whose website isn’t delivering the expected results, and those preparing to invest in SEO, advertising or a redesign. The audit shows where your money will work and where it will drain away. If security is a concern, we also check for vulnerabilities using the same principles we apply in our own DevSecOps practice.
WHEN YOU NEED IT
- Your website generates fewer enquiries than you hoped for
- You plan to invest in SEO or advertising and want to know whether the site is ready
- Your site loads slowly and it’s not clear what’s holding it back
- You want an independent opinion on your previous developer’s work
- You want to make sure your site has no vulnerabilities attackers could exploit
PROCESS
How a website audit works
01
Analysis
We use professional tools to check speed, SEO, security and usability. We also look for the most common vulnerabilities from the OWASP Top 10.
02
Findings
We compile the issues and show how each one affects enquiries, rankings or security.
03
Priorities
We rank improvements by impact and effort. The one that delivers the most comes first.
04
Consultation
In a one-hour conversation, we walk through the report and agree on the next steps.
SEO audits, performance audits and security checks
- Technical and SEO audit
- Website performance audit (PageSpeed, Core Web Vitals)
- Security and vulnerability check (OWASP Top 10)
- Prioritized action plan
What’s included in the audit price
- Detailed audit report
- List of priorities ranked by impact
- Recommendations with specific examples
- Consultation (1h)
TECHNOLOGIES
SECURITY
Why a security check is part of the audit
Attacks are automated
Scripts scan websites around the clock, looking for weak spots. Even a minor vulnerability can end in a data leak, downtime or lost customer trust. An audit finds it before it becomes expensive.
What you get
A security report with the main risks and specific recommendations on what to fix first. We don’t require much preparation: all you need is a request and your website address.
Only with your consent
We test only with your consent and only systems you are authorized to test. Security tests can put load on the server, so please read the terms and risks before submitting a request.
TOOL AND METHOD
We test with OWASP ZAP, the industry standard in security testing
Google, Microsoft and Amazon also use OWASP ZAP to protect their systems. We have built it into our development process: every new piece of code we push to GitHub automatically goes through an OWASP ZAP check before it reaches the live site. In an audit, we look for these 12 groups of vulnerabilities.
01
SQL injections
Input fields that can be used to access the database or change its contents.
02
XSS (Cross-Site Scripting)
Injecting malicious code into a page that then runs in other visitors’ browsers.
03
Authentication flaws
Weak passwords, session management and login errors.
04
Access control errors
Places where a user can access data or functions without permission.
05
Insecure configurations
Default settings, open servers, unnecessary services.
06
Outdated components
Plugins, libraries and CMS versions with known vulnerabilities.
07
Insecure data transmission
Missing or weak HTTPS/SSL encryption.
08
CSRF (Cross-Site Request Forgery)
An attacker performs actions on a user’s behalf without their knowledge.
09
Server information leakage
Error messages and HTTP headers that reveal unnecessary technical information.
10
File upload risks
Improperly restricted file uploads that allow malicious code to be planted.
11
Insecure API endpoints
Missing authorization or limits on API requests.
12
Weak logging and monitoring
A breach goes unnoticed and nobody responds to it in time.
THE RESULT
You get a clear picture of your website’s condition and a plan for where to invest so that your money pays off. You can implement the plan yourself, with your own developer, or together with us.