External Website Security Review

Fixed price $1,900

External Website Security Review

A thorough review of your public-facing website and online presence — for small businesses that collect submissions, process payments, or handle customer data online.

What’s included

• Everything in the Public Website Security Check
• Deeper manual review of public-facing components (not just automated scans)
• Review of public forms, login entry points, file uploads, and visible API endpoints
• Attack surface snapshot — a map of what an attacker can see from the outside
• Inventory of third-party scripts loaded by your site (analytics, chat, payment widgets) and the risk they carry
• Cookie security review — Secure, HttpOnly and SameSite flags on cookies your site sets
• Subdomain discovery from public certificate transparency logs
• Identification of visible weaknesses and data exposure concerns
• Executive summary and technical findings report
• Follow-up questions about the findings answered by email

Who is this for

• Small businesses with lead generation forms or contact submissions
• Small e-commerce sites with checkout or account creation
• Professional firms (legal, accounting, consulting) collecting sensitive information online
• Companies who’ve previously had a security concern and want to know where they stand

What you’ll receive

• A detailed 10–15 page PDF report split into executive summary and technical findings
• One-page “what to fix this week” action list
• Email support for questions about the findings
• Plain-English remediation guidance for each issue

How long it takes

7–10 business days from scope confirmation.

Covered by the FTC Safeguards Rule? If you need these assessments every six months, see our FTC Safeguards Rule External Assessment plan.