Executive Website Trust & Security Snapshots for small businesses: visible risks, email fraud protection, GDPR-relevant trust signals, and clear priorities — only with written permission.
No scanner dump reports. We translate technical findings into business risks.
HTTPS, redirects, security headers, exposed files (.env, .git, backups), admin surfaces, technology footprint. We don't say "DMARC missing" — we say "A fraudster could send invoices in your name."
SPF, DKIM, DMARC review of your company domain. Fake invoices, email fraud and CEO fraud often start with weak email protection. We show where your domain is vulnerable.
Visible WordPress risks: admin paths, outdated version signals, plugin hints, public API endpoints. No access. No internal access.
Visible privacy and trust signals. Not legal — technical. Which signals do customers and regulators see from the outside?
Suspected hacking, incident de sécurité or defacement? External situation assessment within 48 hours. Clear priorities. Not panic, a plan.
Transparent, documented and traceable.
You name the domain. We define the review scope together in writing.
No automated scan. Only what you document and approve. That is professional care.
Non-destructive. No access, no internal access, no system load. We see what an attacker sees.
PDF in plain language. Technical details in the appendix for your IT partner.
After fixes we re-check — included. Or monthly with Monthly Care.
No call center, no chatbot. Real advice from a real person in Karlsruhe.
info@sab-security.net