Process
How a Content Sprucefield engagement unfolds
A predictable path for website and hosting security monitoring guidance — scoped in writing, reviewed carefully, delivered as priorities you can assign.
-
Enquiry and fit
You share the site address, hosting type, and what prompted the review — certificate surprises, malware mail from the host, a staff change, or a planned redesign. We confirm whether an assessment, hosting review, retainer, or readiness session fits.
-
Written scope
We list hostnames, access method, deliverables, timeline, and fee. Work starts only after you accept the scope. Production write access is avoided unless a separate change task is agreed.
-
Collection and review
Public surface checks, panel configuration notes, and monitoring inventory are gathered. Findings are organised by urgency and by who can fix them — your developer, host support, or office owner.
-
Findings pack and walkthrough
You receive a written pack plus a clarifying call. Monitoring guidance retainers continue monthly from this baseline; one-off assessments close after the walkthrough unless you extend.
What you keep
- Ownership of hosting accounts and CMS credentials
- A prioritised remediation list sized for your team
- Monitoring habits documented in plain language