Find out what your website tells regulators — and attackers — about you
A 30-point manual and automated review of your public website: security headers, TLS configuration, cookie and privacy compliance, form handling, exposed admin paths and outdated components. Delivered as a written report with fixes in priority order.
$300
Get my checkup — $300 Talk to us firstWhat we check
Transport & headers
- TLS version, certificate chain, HSTS
- Content-Security-Policy, X-Frame-Options, Referrer-Policy
- Mixed content and insecure redirects
Privacy compliance
- Cookie consent behaviour vs. GDPR / CCPA-CPRA expectations
- Privacy policy presence and required disclosures
- Third-party trackers and where data is sent
Exposure
- Login and admin paths, directory listing, version disclosure
- Known-vulnerable CMS plugins and JavaScript libraries
- Forms: CAPTCHA, HTTPS posting, PII handling
Trust signals
- Contact, terms and refund pages a buyer or payment processor expects
- Accessibility basics that compliance reviewers flag
- DNS hygiene: SPF, DKIM, DMARC for your sending domain
How it works
Checkout takes a minute; the confirmation asks for your website address and any subdomains.
Automated scanning plus a TenGrid Security analyst looking at the results by hand.
PDF with each finding, why it matters, and the exact fix, ordered by risk.
The checkup reviews only publicly reachable pages of the domain you own. It is not a penetration test and does not attempt to exploit anything. Purchase is for one primary domain; additional domains can be added at the same price.
Questions
Is this a compliance certificate?
No. It is an advisory report you can use to fix issues before a customer, regulator or payment processor finds them. We do not issue certifications.
What if my site is on WordPress, Shopify or Webflow?
All are fine. Fixes are written for your platform.
Can you do the fixes?
Yes — quoted separately after the report, or included in the Compliance Consulting Package.
Refunds?
If we cannot deliver the report within 5 business days of receiving your domain, we refund in full.