Security
They don’t hit you because you’re important
They hit you because you’re easy. Security audit and penetration testing for WordPress, with a written report and specific remediation steps.
The problem
The attack doesn’t choose you, it finds you
Most WordPress sites aren’t victims of a targeted attack. They fall to automated programs that scan addresses in order and try known weaknesses in well-known plugins.
That’s why the question “who would bother with my site?” makes no sense. Nobody is bothering with you — a program is bothering with everyone.
The mistakes
What most people do
“I installed a security plugin”
The plugin locks the door. It doesn’t check whether the back window is open — or whether someone already got in.
Old accounts with privileges
The previous developer, the friend who helped, the partner who left. Administrator accounts nobody remembers.
Plugins you don’t use
Deactivated doesn’t mean harmless. The code is there and in many cases still reachable.
Two levels
Audit or penetration test?
Two different jobs. One looks at what’s visible, the other tests what breaks.
Security audit
from €30
We record the current state: versions, permissions, accounts, settings, known weaknesses.
- Version check of WordPress, themes and plugins
- Review of accounts and permissions
- File scan for suspicious code
- Review of server settings and file permissions
- Written report with prioritized findings
Penetration test
from €30
We actively try to get in, the way someone who wanted to would.
- Everything included in the audit
- Active testing of known weaknesses
- Testing of forms, file uploads and login
- Verification of every finding — no false alarms
- Report with reproduction and remediation steps
Before we start, we need your written permission
A penetration test is, technically, an attack. The only difference from a real one is that the owner has requested it in writing.
That’s why, before we touch anything, a short authorization is signed: which address, which days, what’s allowed and what isn’t. If the site is hosted elsewhere, the provider is notified too.
It isn’t bureaucracy. It protects us both.
Price
30,00 €one-off+24% VAT
The price depends on the size of the site and the number of plugins.
- A written report, not a verbal description
- Findings ranked by severity
- Specific remediation steps for each one
- Re-test after the fixes
- Whatever we find stays between us
Prices exclude VAT.
Want to know what someone looking at your site sees?
We start with the audit. If something serious turns up, you’ll hear it from us before you learn it the hard way.