Free guides and self-checks
The rulebooks big companies pay for. Rewritten for the person who owns the website.
Five security frameworks, each cut down to the parts that protect a website, each with a free self-check you can score in about ten minutes. Plus a plan for the day something goes wrong.
Every guide is free
Pick the one that matches your worry.
No email address needed. Your answers stay in your browser unless you choose to send us your score.
Website hacked? What to do now
What to save, which passwords to change first, how to find the way in, and how to get Google's warning removed.
Read the recovery planISO 27001 checklist for website owners
The international security standard, cut down to ten areas a website owner controls. Scored instantly.
Take the checklistThe ten ways websites get broken into
The developer's list of the most critical web risks, explained with examples from real sites.
Read the guideThe server, domain, email and backups
Everything behind the homepage that attackers go after and owners rarely look at.
Read the guideSix jobs every website needs done
Govern, Identify, Protect, Detect, Respond and Recover, applied to one website. Most owners only do Protect.
Read the guideWhen a customer asks about SOC 2
The Trust Services Criteria that touch your website, hosting, DNS and email, and how to answer the questionnaire.
Read the guideThe Hacker Fortified Standard
How we audit: ten areas mapped to ISO/IEC 27001 and ISO 9001, and the rules for earning the badge.
See the standardNot sure where to start?
Something looks wrong right now? Go straight to the hacked website plan.
A customer sent a security questionnaire? Start with SOC 2 if it mentions SOC 2, otherwise ISO 27001.
You run a store, logins or forms? Start with the OWASP Top 10.
You look after your own server or hosting? Start with the CIS Controls.
You want the big picture in ten minutes? Start with NIST CSF 2.0.
Every self-check ends with the same offer. Send us your score, and a person replies in writing within one business day with the three gaps we'd close first. Free, whether you hire us or not.
A self-check tells you what you believe. An audit tells you what's true.