SAB Security Deep Review — Website Security Review for Small Business | 299 €
External website trust and security review for small businesses. HTTPS, security headers, SPF/DKIM/DMARC, exposed files. PDF report in 48h. 299 € fixed price, written permission required. Germany-based.
A website review that strengthens your business — not scares you
The Deep Review is a non-destructive external assessment of your website. We look from the outside at what customers, search engines, and fraudsters see — and give you a clear, actionable report. For 299 €. One-time payment. No subscription.
What we check
Every check is external, non-destructive, and risk-free. Your website keeps running normally throughout.
HTTPS & TLS
Valid certificate, modern TLS protocols (1.2/1.3), correct HTTP→HTTPS redirect, no mixed content. The absolute baseline for trust — and a Google ranking factor.
Security Headers
HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Missing headers are the most common and easiest-to-fix security gaps.
Email Security (SPF/DKIM/DMARC)
Without these three DNS records, anyone can send emails pretending to be your domain. We check all three and provide exact configuration recommendations for your DNS provider.
Publicly Exposed Files & Admin Pages
Login pages, admin panels, phpMyAdmin, debug endpoints, directory listings, accessible backups — we document everything visible from the outside.
Technology & CMS Footprint
CMS detection, plugin versions, server headers, outdated JavaScript libraries. We show what your website reveals about its stack and how to reduce the attack surface.
Sitemap, robots.txt & security.txt
Check for correct sitemap, robots.txt configuration, and canonical URLs. Errors here directly affect your Google visibility.
Google Visibility & Trust Signals
Legal notice, privacy policy, cookie behavior, embedded third-party services — everything your visitors and data protection authorities can see.
Manager-Friendly PDF Report
Executive summary, prioritized findings (critical/high/medium/low), practical remediation steps, and one free retest. Written for decision-makers, not engineers.
One Retest Included
After you apply our recommendations, we verify once at no extra cost. To confirm every gap is closed — and no new issues were introduced.
No hacking. No attacks. No fear tactics.
The Deep Review is explicitly not a penetration test. We don't attack your systems, we don't test passwords, we don't run denial-of-service tests. We only observe what's publicly visible — like a very attentive visitor with professional expertise.
No Active Attacks
No SQL injection, no XSS, no exploit attempts. We don't manipulate anything on your website.
No Denial-of-Service Tests
No load testing, no availability testing. Your website stays up and running normally throughout.
No Social Engineering
No phishing simulations, no test calls to your staff. We test technology, not people.
What we need from you
Written Permission
Before we begin, we define the scope together and you authorize it in writing. No review ever starts without your explicit consent.
Your Website Domain
That's all we technically need. No admin access, no passwords, no server login. Everything we check is visible from the outside.
48 Hours
After written authorization, we deliver your report within 48 hours. Urgent requests can often be processed faster.
How it works
You reach out
Send us an email with your website address. We'll respond within one business day.
We define scope
Together we agree in writing on exactly what will be checked — and what won't.
We review
After your written authorization, we examine your website from the outside. Safe, controlled, non-destructive.
Report & retest
You receive the PDF report within 48 hours. One free retest after you apply the fixes is included.
Common Questions
Who is the Deep Review for?
Small businesses of all kinds: restaurants, trades, transport, medical practices, law firms, real estate, local services, freelancers, and agencies. Anyone with a website who wants to know if it builds customer trust.
What does the Deep Review cost?
299 € including one retest. One-time payment, no subscription, no hidden costs.
Do you need access to my server?
No. We check from the outside only — via your website, DNS records, and public information. No admin access or passwords needed.
Can the review damage my website?
No. Our review is non-destructive. We only observe, we change nothing. Your website stays up and running normally throughout.
How long is the report valid?
The report is a snapshot at the time of review. We recommend repeating the review after major website changes or at least annually.
Ready for your Deep Review?
Send us an email with your website address. We'll respond within one business day. No review begins without your written authorization.
Request Deep Review — 299 €Questions? info@sab-security.net