Security Scanning

Regular checks that catch problems before your customers do.

Most business sites don't go down because of some sophisticated attack — they go down because a plugin went unpatched for a year and nobody was watching. Ongoing scans catch the small stuff before it becomes a hacked site, a blacklisted domain, or a customer who saw it first.

What's Included

Watching for the things that actually take a site down.

  • Malware & malicious code detection
  • Vulnerability & outdated-software checks
  • SSL certificate monitoring & renewal alerts
  • Blacklist status checks (Google, browsers)
  • A plain-language report after every scan
  • Fixes handled by us, not left for you to sort out
How It Works

Scan, report, fix — on a schedule that fits your site

  1. 1

    Scheduled Scan

    What happens: an automated scan checks your site for malware, known vulnerabilities, and certificate issues.

  2. 2

    Plain-Language Report

    What happens: you get a summary of what was found — no jargon, no dashboard you have to learn to read.

  3. 3

    Fix, Not Just Flag

    What happens: if something needs fixing, it gets fixed as part of the plan — not handed back to you as a to-do list.

Pricing

Bundled into every Care Plan, or as a one-off.

Monthly or quarterly scans come standard with Care Plans. Need just one scan on a site we didn't build? That's available on request too.

See Care Plan pricing
FAQ

Common questions about security scanning

How often does a scan run?

Frequency depends on your Care Plan tier — monthly at minimum, weekly or continuous monitoring on higher tiers. See the pricing page for exact tiers.

Can you scan a site you didn't build?

Yes. A one-off scan on any site is available on request, whether or not we built it.

What happens if a scan finds something serious?

You're contacted right away, not after the next scheduled report — and if you're on a Care Plan, the fix is already covered.

Does this replace hosting-level security?

No — the two work together. Hosting-level firewalls block attacks in real time; scans catch what's already on the site or about to expire, like an SSL certificate.

Don't wait for a customer to find the problem first.

One message. That's the whole first step.

Ask About a Scan