How much it costs.
Written quotes for defined work. If it's not on this page, we'll work out a written estimate from scope and delivery time — and you'll see it before you commit.
Hardening Audit
A passive security review of one website. Written report with every finding quoted against its evidence.
- One domain, up to 3 subdomains
- DNS & email posture (SPF, DKIM, DMARC)
- HTTP security headers & TLS
- Written report, plain English
- No credentials, no access needed
Quarterly Retainer
Same checks on a schedule, quarterly updates on what changed, priority on email. For one site that stays live.
- Everything in Hardening Audit
- Quarterly report refresh
- Priority email response
- Small header/TLS fixes handled for you
- Cancel anytime, 30 days notice
Website Rebuild
A new site, built properly and hardened at the same time — same firm, same person, no handoff between builders and auditors.
- Up to 6 pages, custom design
- Modern, fast, accessible build
- Hardened as we go
- Training & handover documentation
- Quoted separately: copy, photos, payments
All prices in GBP. If a job is larger or smaller than a tier, we'll scope it in writing.
Emergency Fix
£300–£800, quoted after diagnosis. Used when the site is down or a finding is actively exploited and you need it handled same-week.
Diagnosis is included in the fee. Any fix beyond the emergency window is scoped separately before work continues.
Questions we usually get asked
What do I actually get from the audit?
A written PDF with each finding described in plain English, the evidence quoted, severity, and what to fix. No jargon, no sales pitch. You can read it and act on it yourself, or have us do the fixes.
Do I need to give you passwords or server access?
No. The audit is passive — it only looks at what's visible from the outside. For some fixes we'll tell you what's needed and you or your host makes the change. We never ask for credentials.
How long does an audit take?
3 working days from when we have the domain to when the report lands in your inbox. For a retainer, the first report is the same 3 working days, then quarterly.
What's the difference between the audit and the retainer?
The audit is a one-time snapshot — useful if you want to know where you stand today. The retainer is the same checks on a schedule, with quarterly updates on anything that changed. Most people start with an audit, then move to the retainer.
What does the rebuild include and exclude?
Includes: up to 6 pages, custom design, modern accessible build, hardening as we go, training, handover docs. Excludes (quoted separately): new photography, new copywriting, payment gateway setup, migration of a large existing content library.
How do I pay?
Bank transfer, once we've agreed the scope in writing. Audit and retainer: half up front, half on delivery. Rebuild: half up front, half on delivery. Everything's confirmed in an email thread before we start.
Can you just talk it through on a call first?
Yes, happy to book one. But we don't need it — most of the decisions (price, scope, timeline) are on this page already. If you'd like to talk it through anyway, email us and we'll send a scheduling link.
How do I unsubscribe from emails if I'm not interested?
Reply to any email from us with the word “unsubscribe” and we stop contacting that address. That's it — no forms, no “confirm your preferences” step.
Email us your domain. We'll come back with a quote.
We reply within one working day, usually sooner.