Security resources
Practical guidance for owners and developers of small-business websites.
Last reviewed: 18 October 2026
OWASP Top 10:2025 in plain English
The ten most critical web application risk categories, explained for small-business sites.
Common vulnerabilities on SME websites
The issues that show up most often on brochure, booking and e-commerce sites, and how to fix them.
Our passive scanning methodology
Exactly what we check, what we never do, and how findings are graded.
Security best practices
A baseline for headers, TLS, admin access, plugins, backups and logging.
SPF, DKIM and DMARC
How to stop criminals sending email that appears to come from your domain.
Find out what your website reveals
Run the free passive mini-scan in under a minute, or ask for a quote for the full report.
Need help with an issue?
Quick contact Quick fixes Email support
Send the domain and finding reference. Please do not email passwords, customer records or exposed secrets. We reply within one business day; this is not a 24-hour incident-response hotline.