Security Snapshot
Most small-business websites have never been looked at from the outside. The Snapshot shows you what someone scanning the internet would see first, ranked by what's actually worth fixing, without needing any access or passwords.
- Price
- $150–250 CAD
- Turnaround
- 48 hours
What's included
A quick outside look at what anyone on the internet can see about your site. The easiest way to find out whether you have a problem.
- Automated scan of security headers, TLS, dependencies and exposed secrets
- Short written report with 3–5 prioritized findings
- 20-minute walkthrough call
How it runs
Start with what's public
A free finding or a Security Snapshot. It only looks at what anyone on the internet can already see, so no access or passwords are needed.
Talk it through
A short call in plain English: what each finding means for your business, and which ones actually matter this month.
Get the fix, not just the finding
Deeper testing only happens under a written scope agreement. Fixes arrive as pull requests your developer can review, DNS records ready to paste, or takedown reports already filed.
Keep watching
Look-alike sites come back under new domains and new email senders appear. A retainer keeps someone watching after the report is done.
Often requested by
Law and accounting firms
Wire-fraud and impersonation usually start in the inbox. If your domain has no email authentication, anyone can send a convincing "change of payment details" email as you.
Dental, physio and med-spa clinics
Under PHIPA you're accountable for patient information. Online booking tools, forgotten staging logins and outdated plugins are where it leaks.
Pre-seed and seed SaaS
An enterprise buyer's security questionnaire can stall a deal for weeks. A leaked API key or open staging environment is far cheaper to fix now than mid-deal.
Self-hosted online stores
On WooCommerce, Magento and custom builds, an outdated plugin is a common way card-skimming code ends up in your checkout without you noticing.
Property management and real estate
Tenant records, deposit payments and look-alike domains make you a target for payment redirection scams aimed at your clients.
Other services
Ask about Security Snapshot
Say what you run and when you need it. You'll get a fixed quote within the published range before any work starts.