SERVICES & PRICING

Find it. Prove it. Fix it. Monitor it.

Audits, penetration testing, remediation packs, and a monitoring retainer — priced for small businesses, with one-time and monthly options.

FIND

Two audits. One-time prices.

Both audits end the same way: a plain-English report ranked by risk, with the exact steps to close each gap. The difference is how deep we go.

Basic Security Audit

The essentials most small businesses never check.

$199one-time

3–5 BUSINESS DAYS

Domain registration & WHOIS privacy review
DNS record review (A, CNAME, MX, TXT)
Email authentication check (SPF, DKIM, DMARC)
SSL/TLS certificate & HTTPS enforcement check
Two-factor authentication coverage review
Public exposure scan (admin logins, open directories)
Password hygiene & shared-credential review
Plain-English PDF report with prioritised fixes

Best for solo operators and small teams with a website and a handful of accounts.

Book this audit

MOST THOROUGH

Premium Security Audit

Everything in Basic, plus a deeper look at how your business actually runs.

$399one-time

5–7 BUSINESS DAYS

Everything in the Basic Security Audit
CMS / platform & plugin vulnerability review
Hosting & backup configuration review
User & staff account access audit (least privilege)
Third-party app and integration inventory
Payment & customer-data handling review
Phishing-resistance review of your email setup
Incident checklist: what to do if something goes wrong
Prioritised remediation roadmap with effort estimates
45-minute walkthrough call to review findings

Best for businesses with staff accounts, customer data, or an online storefront.

Book this audit

GO DEEPER

Penetration Testing

A manual exploitation test that goes deeper than any audit.

Typically $899–$1,4991–2 WEEKSQUOTE ON CONTACT

Manual attempts to exploit the gaps an audit identifies
Authenticated testing of your application logic
CMS, plugin & API surface probing
Privilege-escalation & access-control checks
Findings ranked by real-world exploitability
Debrief call plus full technical report

Every engagement is scoped to your setup — tell us what you run and we'll come back with a fixed quote.

Request a quote

FIX

Close the gaps we found

The audit finds what's wrong. These packs fix it — quoted after the audit so we close exactly what was found, never a generic package.

Quick-Fix Pack

Close the urgent findings from your audit.

$299one-time

2–3 BUSINESS DAYS

SPF, DKIM & DMARC email authentication setup
Two-factor rollout on critical accounts (email, domain, hosting, payments)
Admin URL hardening & exposed-directory protection
SSL / HTTPS enforcement fixes
Domain privacy (WHOIS) enablement
Verification that each fix holds

Best for audit clients who want us to handle the top-priority fixes.

Quote this pack

DEEPEST FIX

Hardening Sprint

Everything in Quick-Fix, plus deeper structural hardening.

$599one-time

3–5 BUSINESS DAYS

Everything in the Quick-Fix Pack
Web Application Firewall (WAF) configuration
Backup setup with a tested restore
Plugin & core updates with patch verification
Staff access cleanup to least-privilege
Security headers & server config hardening
Post-hardening re-scan to confirm the surface is clean

Best for businesses that want a hardened setup, not just the urgent items patched.

Quote this pack

MONITOR

Stay ahead between audits

A monthly retainer that watches your security surface so new exposures don't sneak up on you.

Security Monitoring Retainer

Standalone monthly monitoring — no website care plan required.

$149/month$1,499/yearSAVE ~16% VS MONTHLY

Monthly automated vulnerability scan
Uptime & SSL-certificate expiry monitoring
New-exposure alerts (domain, DNS, cert changes)
Quarterly mini-audit refresh
Direct email channel for security questions
Priority handling if something breaks

This is standalone security monitoring — no website care plan required. The $49/mo Security Add-on on upbuildr.com bundles monitoring into a maintenance plan; this is monitoring on its own.

Start monitoring

Not sure which one fits?

Tell us what you run and we'll point you at the right service — or tell you that you don't need us yet.

Ask us