Before testing
Confirm ownership, written approval, website scope, preferred contact, and any sensitive areas to avoid.
48-Hour Audit
Fast website security clarity before small issues become expensive
The 48-Hour Website Security Audit is a scoped, safe review for small Australian businesses that need practical findings, evidence, and next steps.
Starting from $690 + GST
Technical testing is only performed with written permission and a defined scope. If a system is not approved, it is not tested.
What is checked
The audit checks the obvious weaknesses attackers commonly look for first, using non-destructive methods matched to the agreed scope.
- Public website exposure and common misconfiguration signals
- Security headers, TLS, redirects, and browser-facing protections
- CMS and plugin exposure where visible or authorised
- Admin path exposure and account-risk signals
- DNS, domain, and email authentication basics
- Known leak indicators and obvious public data exposure
- Safe vulnerability checks within the written scope
What is not included
A scoped audit is not a licence for aggressive testing. The boundaries are deliberately clear.
- Unauthorised testing of systems you do not own or control
- Denial-of-service testing, destructive testing, or social engineering
- Full penetration testing, compliance certification, or legal advice
- Guaranteed discovery of every possible vulnerability
- Changes to production systems without written approval
Deliverables
Plain-English PDF-style report
Screenshots and evidence for meaningful findings
Risk ratings and priority order
Practical remediation steps
Questions to raise with your developer, host, or IT provider
Short follow-up call or email walkthrough
Timeline
The audit is designed for momentum without cutting corners on permissions, scope, or reporting clarity.
Within 48 hours
Run safe checks, validate findings, remove noise, and prepare the report.
After delivery
Walk through the highest-priority issues and agree what should be fixed first.
Example report sections
Reports are structured so owners can understand the business risk and technical providers can act on the evidence.
Executive summary
Scope and permissions
Risk rating overview
Evidence and screenshots
Priority fixes
Recommended next checks
Owner, developer, and hosting-provider action list
To book, provide the website URL, business owner approval, and any limits on what can be checked. You can start from the contact page.
Book a scoped 48-Hour Website Security Audit
Send the site URL and business context. Yarra Secure will confirm the scope and written approval before testing starts.