Website security review
Protect the peoplewho trust your website.
A security review of your whole small website or web app, with clear answers about what needs attention. We check how the site protects the people and information behind your business, then explain any confirmed issues and practical next steps.
$1,500 plus applicable tax · Full small-website package · Async onboarding
Final report within 24 hours of your confirmed staffed start.
One focused engagement
Full website included.
One complete website, with its pages and customer flows included when it fits the small-site package. We confirm the inventory, access and price before you pay.
Website Security Review
$1,500
plus applicable taxBase fee for the agreed scope, plus applicable tax. Stripe calculates the final total from your billing details before you pay.- One application on one hostname
- All pages, features and customer flows, up to 25 distinct page/route types
- Public access plus up to two authenticated roles and 10 related first-party API operations
- Any confirmed findings and practical repair guidance
- A final report, including coverage and limitations
- One retest of agreed fixes, up to one hour within 14 days
The entire site must fit these limits; we do not select 25 pages from a larger site and call it a full review. Larger sites, additional apps, infrastructure, third-party systems, comprehensive penetration tests and compliance attestations need a different scope. Repairs are optional and quoted separately.
The 24-hour delivery window begins at the confirmed staffed start, after scope, authorization, required access and payment are complete. If access or scope blocks the work, we contact you and agree the next step. Every closeout includes a final coverage and limitations report.
Send the project.
Agree the scope.
Get the report.
A dedicated security enquiry keeps the testing boundaries and authorization clear from the start.
- 01 / Fit check
Show us the website
Share the URL, who uses the site and what it helps them do. We check its full inventory and access requirements before payment. Leave credentials and sensitive data out of the enquiry.
- 02 / Confirm the engagement
Agree before work begins
Review the scope, reviewer, terms and authorization. After acceptance and studio approval, pay through secure hosted checkout. We confirm required access and a staffed start separately.
- 03 / Act on the results
Take a clear next step
Receive your report. Work with your developer or request a separate proposal for named fixes and agreed retesting.
Optional monthly care
Keep an eye on
what changes.
Software changes. Dependencies change. New advisories appear. Monthly security care can provide defined recurring checks and a report for an already reviewed application.
$500 / month
Register interest after your review. Monthly care starts only after a separate scope and activation are agreed; requesting information does not start a subscription.
Before you book.
Does this include the full website?
Yes, when the whole site fits the small-site package: one app on one hostname, up to 25 distinct page/route types, public access plus two authenticated roles and 10 related first-party API operations. We confirm all pages, features and customer flows before payment. Larger sites receive a separate proposal first.
Is this a full penetration test?
No. We perform the agreed security checks across the complete accepted small-site inventory. This does not cover every possible attack path or establish that the site has no vulnerabilities. Infrastructure, third-party systems and comprehensive or compliance-driven penetration tests need a different engagement.
What if no findings are confirmed?
You receive a final report with the performed checks, results and limitations. No confirmed findings does not establish that an application is free of vulnerabilities.
Do you need credentials or source code?
No credentials are needed for the initial fit check. We agree a secure access route before testing. Do not send passwords, code, tokens or customer data through the enquiry form.
Can you help with the fixes?
Where the work fits our expertise and access, we can quote separately for named repairs, regression checks and deployment responsibilities. Your developer can also use the report.
Who performs the review?
A 6 Watt Labs reviewer is responsible for the final report. We introduce the responsible reviewer and their relevant experience before the engagement is agreed.
Start with your website.
Tell us what your website helps people do. We’ll check that the whole site fits and explain the next steps.