Rennwick. website upgrades & customers, delivered

Security Audits

Site and security audits for the site you have — on whatever platform it runs. Automated, human-reviewed, or custom-scoped, with a ranked plain-English fix list.

Your site can look fine and still have holes. We check the site you have — wherever it runs — and hand you a ranked, plain-English list of what we found and how to fix it. If you take payments or hold customer data, this is how you find problems before someone else does.

What an audit costs

Three tiers, and two versions of each — pick by where your site actually runs. If it is a hosted shop or a website builder (Shopify, Wix, Squarespace, WordPress on a managed host), use the hosted versions. If you run your own server, use the self-hosted ones. They check the same things; only the access differs.

Your site runs on a hosted shop or builder

  • Automated check — €149. We look from the outside: your pages, checkout, domain email and the apps you have installed. You get a plain-English PDF of what we found. What you get   Add to basket — €149
  • Reviewed by a person — €500. The automated check, plus a person who goes through your staff accounts, apps, payment settings and customer data, then a call to talk it through. What you get   Add to basket — €500
  • Custom audit and fixes — €600. For stores with custom themes, many apps or complicated payment setups. We scope it first, agree a fixed price, then audit and do the work. What you get   Add to basket — €600

You run your own server or VPS

Not sure which one? Start with the €149 automated check. It tells you whether the bigger tiers are worth paying for.

Two kinds of site, three levels

Three levels, wherever your site lives

Every audit steps up the same ladder: Automated €149, Reviewed €500, then Custom €600. What changes is what we can check: a site you run yourself is a different world from a store on Shopify.

01 — Sites You Host Yourself

Sites You Host Yourself

For sites you run on your own servers: Magento, WooCommerce, Laravel, or custom code. We check what the internet can see, then go deeper into the parts only you can reach.

Browse the audits for your own server →
02 — Hosted Platforms

Hosted Platforms

For stores and sites on hosted platforms such as Shopify, BigCommerce and Wix. The platform handles the code, so we check what still leaks: DNS, apps, extensions, staff access and configuration.

Browse the audits for hosted shops →
What each audit checks

What is actually checked

Every audit is run by us, with the checks we use day to day:

  • Real-browser checks. We load your key pages the way a shopper's phone does: load speed, mobile behaviour, search signals, and the path a customer actually walks.
  • DNS, email and blacklist checks. SPF, DKIM and DMARC records, and whether your domain is on any blocklist.
  • Known-issue matching. The software, apps and extensions your site runs, checked against public lists of known problems.
  • Code review where we can reach it. We trace where untrusted input actually flows, so your report lists real problems rather than hundreds of scanner false positives.

You get a ranked findings report in plain English, an owner summary, and a fix list you own. The first two levels hand you a report you can take to any agency; the custom level starts with a paid scoping phase and a written fixed quote.

WordPress and WooCommerce build-and-fix work goes to our partner agency, Pink Crab. If something is better handled elsewhere, we’ll tell you straight.