Guidance detail
Website Security Assessment
A structured review of your public site: exposure points, configuration gaps, and a clear remediation order your team can act on.
Who it is for
Owners and operators of business websites who need clear hosting and application security guidance without a managed security product.
Result
A written findings pack with prioritised fixes, hosting configuration notes, and a monitoring checklist tailored to your stack.
Format
Remote review with optional on-site walkthrough in Sedibeng and surrounding Gauteng
Provider
Senior security advisor from Content Sprucefield
Preparation
Admin panel access or a staging mirror, a list of third-party scripts, and the person who manages DNS and hosting.
Constraints
We work within agreed change windows. Production write access is never required for the assessment itself.
Included
- Public surface review of pages, forms, and exposed endpoints
- Hosting and TLS configuration check against common hardening baselines
- Authentication and admin-path exposure review where access is provided
- Prioritised remediation list with effort estimates
- Follow-up clarification call (60 minutes)
Outside this engagement
- Penetration testing with destructive payloads
- 24/7 managed monitoring or SOC staffing
- Code rewrites or plugin development
- Legal compliance certification
Process
- Scope call to confirm sites, hosting panel, and access method
- Read-only collection of configuration and public findings
- Analysis and written report
- Walkthrough of priorities and monitoring habits to keep