Priced by service, not by subscription.
Every assessment is a one-off engagement - you pay for the specific check you need, I run it and review it personally, you get a report back. No dashboard, no recurring bill.
DNS & Domain Health Check + Email Security Check
No commitment · Delivered as a reviewed PDF report
- DNS configuration and attack-surface snapshot
- SPF, DKIM, and DMARC email authentication check
- Findings reviewed and written up in plain English
Third-Party Script Audit
Automated scan, reviewed personally, delivered as a PDF report.
- Full inventory of scripts, trackers, and embeds on your site
- First-party vs. third-party origin and missing SRI flagged
- Supply-chain and access risk called out, not just listed
GDPR Compliance Check & Accessibility Check
Manual review, delivered as a PDF report.
- Cookie consent, privacy policy, and data retention review (GDPR)
- WCAG-standard review of contrast, structure, and navigation (Accessibility)
- Both delivered as a personally written report, not an automated score
Full Vulnerability Assessment
Automated scan, reviewed personally, delivered as a PDF report.
- DNS recon, port scanning, SSL/TLS analysis, security headers, sensitive paths, CVE lookup
- A single Risk Score out of 100, explained in plain English
- The core offering - the most complete external security picture available
The free tier exists because a domain and email check costs nothing to run and takes minutes to review - it's a quick, no-obligation look at your DNS and email security, so you can see what I'd catch before committing to anything bigger.
Every price above is for one report, reviewed by one person - me. Nothing here is a subscription, and nothing runs unattended.
Not sure which one you need?
Get in touchAlready spoken with me about a scan? Submit written authorization to get it scheduled - this comes after that initial conversation, not instead of it.