Question 1

What does SAB Security do?

Accepted Answer

We provide safe, passive external website trust and security assessments for small businesses worldwide. We review what's publicly visible about your website — HTTPS, security headers, DNS configuration, email authentication, and common exposure points — then deliver a clear, manager-friendly PDF report with practical recommendations. We never perform intrusive testing, scanning, or exploitation.

Question 2

Who is this service for?

Accepted Answer

Small businesses, WordPress site owners, agencies, freelancers, consultants, local companies, restaurants, doctors, lawyers, real estate agents, transport companies, and tradespeople — anyone who wants to understand and improve their website's public security posture without technical complexity or high costs.

Question 3

Where are you based?

Accepted Answer

We are based in Karlsruhe, Germany. We serve small businesses worldwide, operating under German and EU data protection standards (GDPR).

Question 4

Why do you require written authorization?

Accepted Answer

Written authorization is our core operating principle. It protects both you and us. We only begin any assessment after you explicitly authorize us in writing. This ensures you know exactly what we'll check, when we'll check it, and what we won't do. It's part of our commitment to transparency and trust.

Question 5

What do you mean by "passive" assessment?

Accepted Answer

Passive assessment means we only look at information that's already publicly available about your domain. We check HTTPS certificates, HTTP response headers, DNS records, and publicly accessible files like robots.txt. We never attempt to log in, bypass authentication, exploit vulnerabilities, or send any payload that could disrupt your website.

Question 6

How long does an assessment take?

Accepted Answer

A Starter or Standard Snapshot is typically completed within 3-5 business days after we receive your written authorization. Emergency assessments receive an initial response within hours and a full report within 48 hours.

Question 7

What do I get in the report?

Accepted Answer

You receive a PDF report with an executive summary, findings organized by risk level, clear explanations in business language (what it means for customer trust, email fraud risk, Google visibility, etc.), and practical remediation guidance. Technical details are included but clearly explained.

Question 8

Can I share the report with my clients?

Accepted Answer

Yes. Many agencies and freelancers use our reports as part of their client deliverables. The reports are designed to be professional and client-ready.

Question 9

Is this legal?

Accepted Answer

Yes. Everything we do is based on publicly available information, similar to what anyone can see by visiting your website or looking up your DNS records. We operate strictly within legal boundaries, require written authorization, and never perform any action that could be considered unauthorized access or testing.

Question 10

What do you NOT do?

Accepted Answer

We never perform Denial of Service (DoS) attacks, brute force attempts, credential attacks, social engineering, employee targeting, payment bypass testing, destructive tests, or any activity that involves accessing private data. We also never test without explicit written permission.

Question 11

Do you store or share any data?

Accepted Answer

We only process the data necessary to produce your report. Reports are delivered to you via email. We do not sell, share, or publish any client data. Our full privacy policy is available at /privacy.

Question 12

Are you GDPR compliant?

Accepted Answer

Yes. We are based in Germany and operate under EU GDPR regulations. We minimize data processing, do not use tracking cookies beyond what's strictly necessary, and respect all data subject rights.

Question 13

What payment methods do you accept?

Accepted Answer

We accept bank transfer (SEPA) and major credit cards. Invoices are issued in EUR. Payment is due upon receipt of the invoice.

Question 14

Do you offer refunds?

Accepted Answer

Our assessments are professional services customized to your website. If you're not satisfied with your report, contact us within 7 days and we'll work with you to address your concerns.

Question 15

Can I upgrade from Starter to Standard?

Accepted Answer

Yes. If you order a Starter Snapshot and decide you'd like the deeper analysis, you can upgrade to Standard by paying the difference. Contact us within 30 days of receiving your Starter report.

Frequently Asked Questions

General

Process

Legal & Safety

Pricing

Still Have Questions?