Encryption
SSL certificate and configuration.
Website Security and Privacy Check
A website security and privacy check is a non-intrusive review of your site's security settings and of how it collects personal data through forms, cookies and trackers. Your website collects personal data through forms, cookies and trackers, and it is the first thing attackers probe. We check both sides together: the basic security settings and the privacy practices visitors and regulators see.
Website Security and Privacy Check
What it is
A non-intrusive external check of your website's security configuration and privacy practices, with a prioritised fix list for your developer.
Why organisations need it
Websites leak data through insecure forms, outdated plugins and misconfigured settings, and collect data through cookies and trackers that visitors never agreed to. Both expose you under the PDPA. This check covers the basics without the cost of a penetration test.
What the engagement covers
Security headers
Browser protections configured.
Software
Content management system and plugin versions.
Forms
What personal data forms collect and how it is sent.
Cookies and trackers
What is set and whether consent is obtained.
Privacy notice
Whether the notice matches the site's actual behaviour.
What the business gets out of it
Security and privacy together
One check, two risks.
Non-intrusive
No testing that could disrupt the site.
Developer-ready fixes
Clear instructions.
PDPA support
Consent and notice evidence.
Affordable
Fixed fee.
How it works
How the engagement runs
01
Scan
External checks.
02
Review
Forms, cookies and notices.
03
Findings
Prioritised report.
04
Fixes
Your developer applies them.
05
Re-check
Confirming results.
Deliverables
What you receive
Security findings
Configuration and software.
Cookie and tracker inventory
What the site sets.
Consent assessment
Is consent valid?
Notice alignment notes
Notice versus reality.
Fix list
For your developer.
Who it is for
Who this is built for
Industries
Company sizes
Departments
FAQ
FAQ
No. It is a non-intrusive external check of your website's security configuration and privacy practices. We do not attempt to break in or overload the site. That keeps the cost down and the site unaffected, while still finding the common problems attackers look for first.
We provide a prioritised fix list written for your web developer, covering security settings, outdated components and privacy issues. If it helps, we coordinate directly with your developer or agency.
Where cookies and trackers collect personal data, PDPA notice and consent principles apply. Whether your site needs a consent banner depends on what its cookies and trackers actually collect, which is exactly what the check establishes.
Usually a few days for a typical business website: the external security review, a scan of forms, cookies and trackers, and a report with fixes. Larger sites with many sections or subdomains take longer.
Yes. The check is priced per site, so groups with several brand sites, campaign microsites or country sites can cover all of them, with one consolidated summary for management.