- 20+ years professional development
- Elgin-based, working UK-wide
- Fixed-price proposals
- 90-day managed launch care
- PageSpeed 80+ on every build
- UK company & ICO-registered
- Cloudflare-protected
- Stripe secure payments
Most small businesses have no idea if their site is exposed
A proper security audit is expensive, jargon-heavy, and priced for enterprises — so for most small businesses it simply never happens. The risks stay invisible until something goes wrong.
We built the opposite: a free, instant, plain-English check that anyone can run on their own site in seconds — and a full report for those who want the detail. It started as a security scanner; it’s grown into Website MOT — security, health, and compliance readiness, all from the same platform.
What we built
A self-service scanner with paid reports behind it — the whole funnel, built end to end and running in production on this site.
Instant free scans
Enter a domain and get results back in seconds — security, health, or compliance readiness — no signup, no waiting, results in plain English.
Three reports, one platform
Security: malware blocklist, HTTPS/TLS, headers, email authentication. Health: Core Web Vitals, accessibility, technical SEO. Compliance: the technical basics a buyer’s questionnaire looks at.
Plain-English PDF reports
Want the detail? A paid PDF report explains every finding with a prioritised action plan — or get all three combined into one Full Site Report for less than buying separately, ready to hand to a developer or host.
Compliance-readiness checks
A dedicated check of the technical basics a buyer’s security questionnaire or Cyber Essentials assessor looks at — useful when a customer starts asking questions.
Accounts, credits & history
Buyers get Stripe-billed scan credits, multi-tenant accounts, and a dashboard that tracks findings over time — so improvement is visible, not guessed at.
Built from our own work
The scanner is productised from the exact security and systems work we do for clients — the same checks, packaged so anyone can run them.
The engineering behind it
It practises what it checks — the scanner is built to the same standard it grades other sites against.
- Reports generated through event-driven messaging on Microsoft Azure, so the slow work runs in the background
- PDF reports delivered by email via Microsoft Graph, within minutes of purchase
- Stripe billing for the report and for scan-credit packs, with passwordless magic-link sign-in for buyers
- SSRF-guarded scanning that only ever connects to public addresses — it can’t be turned against internal systems
- Multi-tenant accounts and a findings dashboard, secure by design
- A strict Content-Security-Policy and HSTS on the scanner itself — it holds to its own standard
The outcome
A live product, running in production on this very site — productised from the same security and systems work we do for clients. It’s also the top of our funnel: a free scan surfaces the problems, the report explains them, and where a site needs more than a patch, we rebuild it properly and keep it monitored.
It’s the clearest proof of what we build for clients — real integrations, real billing, and secure engineering — because it’s the thing you’re using right now.
See your own site’s report
Run any of the three free scans on your own domain — plain-English results in seconds, and a full report if you want the deeper detail.