CYBERSECURITY & DATA PROTECTION.

A review of your website or application covering authentication, access control, outdated dependencies, exposed admin areas, secrets in code and security headers. You get a prioritised list in plain English, starting with the issues most likely to cause real harm.

Both. Most clients want the fixes done, so the audit leads straight into hardening work, scoped and priced before we start.

We handle the technical side: where personal data is stored, who can access it, how long it is kept and how it is secured. For legal advice on your obligations you should still speak to a qualified data-protection adviser.

Like every ruxox engagement: a written scope and a fixed price before work starts. See the pricing page for our tiers, and use the free website security checker to see your headers today.

No. We are not a certification body. We put in place the technical controls those schemes check, such as patching, access control, secure configuration and malware protection, so you are ready when you apply through an accredited certifier.

Yes. An audit works on any website or application, whoever built it. We need access to the live site, and to the code where you want it reviewed, agreed in the written scope.

Security headers are instructions your server sends to browsers, such as Content-Security-Policy, Strict-Transport-Security and X-Content-Type-Options, that block whole classes of attack. Every public website should set them. Check yours with the free website security checker.