Security

A free security health check for your website.

We run a free, automated scan of your website and send back a plain-English report — five specific things checked, free to request, no obligation. This is free for any business, whether you're a Cys Infotech client or not.

Request my free check

What we check

Encryption

SSL/TLS certificate

Is your certificate valid, correctly configured, and not about to expire?

Headers

Security headers

Checking for the response headers (CSP, HSTS, X-Frame-Options, and similar) that keep a browser from doing something unsafe with your site.

Email authentication

SPF, DKIM, and DMARC — whether mail from your domain can be spoofed, or lands in spam because it can’t be verified.

Exposure

Exposed files & common weak spots

Accidentally public files (like a stray .git or .env) or default admin pages left wide open.

DNS

Domain & DNS health

A basic sanity check of your domain’s DNS configuration.

What this is not

We want to be upfront about what a free automated check can and can't tell you:

Not a penetration test. We check public-facing configuration — we don't attempt to break in or exploit anything.
Not a compliance certification. A clean report doesn't mean you're PCI-DSS, HIPAA, or GDPR compliant — that needs a qualified assessor, not an automated scan.
Not a guarantee. This reduces obvious, common risks. It doesn't guarantee you won't be breached.
A starting point, not a substitute. If you handle payments, health records, or other sensitive data, this doesn't replace ongoing professional security work.

Ongoing monitoring (a repeat check on a schedule, with alerts) may be offered later — ask us if that's something you'd want.

Want to understand the threats behind these checks, not just the checklist? See Security, Explained — real threats and scams local businesses actually run into, broken down one at a time in plain English.