Monitoring£50 / month · Poland: 199 PLN
Monthly vulnerability scan, uptime monitoring, alerts on components in use, security updates, backup checks, monthly summary. No content changes.
SECURITY REVIEW / UK & POLAND
Your website works.
Let's check it's secure.
A functional test confirms a customer can download their invoice. A security review checks they can't download someone else's. You get a concrete plan: what we checked, what to fix first and what to hand to your developer.
REVIEW / REPORTOne clear, prioritised plan
- 01Agreed scopeOne domain and one environment
- 02Specialist reviewTool findings verified by a person
- 03Actionable reportImpact, priorities and recommendations
- 04One re-checkReported fixes within 30 days
Testing starts only after written authorisation from the system owner.
01Why review regularly
Evidence, not assumptions.
Priorities, not panic.
GDPR (UK GDPR in the UK) requires regular testing, assessment and evaluation of security measures. Outsourcing IT does not remove this duty from the data controller — it pays to have evidence of when and what was checked and which issues were fixed. A reportable breach generally has to be notified to the regulator within 72 hours.
02BASIC SECURITY REVIEW
£200 one-off · Poland: 699 PLN
One simple website or small web app, one domain, one environment; we confirm fit before you order.
We check
- Known vulnerabilities in components
- Basic login and permission settings
- HTTPS and security headers
- Public exposure of sensitive files
- Backup configuration
Included
- A report: confirmed findings, possible impact, priorities and recommended actions — separated from items needing further verification, plus what was out of scope
- A 30-minute walkthrough
- One re-check of reported fixes within 30 days
Not included (quoted separately): fixes, source-code review, test restore of backups, full penetration tests, complex platforms. We are not VAT-registered — no VAT is added to these prices.
03CARE AFTER LAUNCH
Care after launch
Maintenance£95 / month · Poland: 350 PLN
Everything in Monitoring + 1 hour a month for small content changes and fixes + quarterly analytics recommendations.
Care Plus£200 / month · Poland: 699 PLN
Everything in Monitoring + 2 specialist hours a month (fixes, advice, recovery help) + critical issues picked up within 4 business hours in agreed support hours.
Billed monthly, 30 days' notice, no minimum term. Annual option: 2 months free. Unused hours do not roll over. Prices cover one simple website or small app; larger systems are quoted separately. 4 hours is the time to start handling, not a promise to fix every outage; plans are not 24/7 support or unlimited fixes.
04UNDERSTAND THE SCOPE
A scan, penetration test and code review are not the same.
Vulnerability scan
Finds potential weaknesses such as known component or configuration issues. Tool output requires specialist assessment.
Penetration test
Tests in controlled conditions whether a weakness can be exploited and with what impact — always within an agreed scope.
Code review
Examines how the application is built, including access control, data handling and authentication.
The basic review is not a full penetration test, a statutory NIS2/KSC audit or a GDPR compliance assessment. If you have a quote for an “audit” and aren't sure what it covers, we'll help you assess it.
05HOW WE WORK
Scope and agreement
We confirm scope, timing and price. Before any work starts we sign the system owner's written authorisation, an NDA and a contract with a liability cap, and agree the test approach and how critical findings are handled.
Review
Specialists use tools; AI supports analysis, but a finding enters the report only after specialist verification. We never send passwords, keys or customer databases to AI models.
Report and walkthrough
Priorities, impact, recommendations and a 30-minute conversation.
Re-check
We verify reported fixes within 30 days.
Extra paid work starts only after your approval.
06START WITH ONE ADDRESS
Share the public address.
We will define the right scope.
Share your public website address or a short description of your app and market (UK / Poland / both). You do not need to know test names — we will confirm scope, price and timing before you order. Do not send passwords, customer data or confidential files.