Menu

Cybersecurity audits

If your website is hit by a cyberattack tomorrow, how much would you lose for every hour without sales?

I test your website security before a cybercriminal does it

GET A QUOTEView services
CMS
Security audit and code review
OWASP
Applied methodology
NDA
Confidentiality agreement
REPORT
Technical and executive report delivery

WHAT SERVICE DO YOU NEED?

CMS Plugin and Theme Audit

Vulnerability assessment of the plugins and themes you use in your CMS (WordPress, Drupal, Joomla and others), followed by communication of the findings to their developers for remediation

  • AI-assisted code analysis
  • Manual code review
  • Manual security testing of each plugin
  • Sending a report to plugin creators with the vulnerabilities found for remediation
  • Notification when the developers publish a patch
From 350 €VAT incl.
Learn more

CMS Audit

Controlled simulation of a real attack against your website to identify security flaws and fix them before they are exploited by a cybercriminal

  • Identification of vulnerabilities associated with the versions of the CMS, its plugins and themes
  • Review of exposed sensitive files and publicly accessible directories
  • Checks for potential user data leaks
  • Analysis of the CMS API and endpoints
  • Controlled authentication testing at the CMS login
  • Review of users, roles and permissions
From 550 €VAT incl.
Learn more
MOST COMPLETE

Complete CMS Security Audit

Complete audit of your CMS (WordPress, Drupal, Joomla and others), which includes a controlled simulation of a real attack against your website and a vulnerability assessment of the plugins and themes you use in your CMS

  • Everything included in CMS Audit
  • Everything included in CMS Plugin and Theme Audit
  • Broader attack surface and more realistic simulation thanks to vulnerabilities found in plugins and themes
  • Global risk view of the whole website
From 800 €VAT incl.
Learn more

WHAT AUDIT APPROACHES ARE AVAILABLE?

01

Black box

We start without privileged information and simulate a cybercriminal to measure your CMS real-world exposure

CMS Audit

02

Grey box

We work with partial access or limited credentials to check what a compromised user could do inside the CMS

CMS Audit

03

White box

We have access to the source code, configuration and credentials needed for a complete review of the CMS, its plugins and themes

CMS Audit

CMS Plugin and Theme Audit

Complete audit

HOW DO I WORK?

  1. Kick-off

    Phase 01 / 06

    We define scope, objectives and ground rules together. Everything in writing before touching anything

    Duration
    30 minutes
    Deliverable
    Scope agreement

  2. Audit plan

    Phase 02 / 06

    A formal document with the methodology, the phases of the test and the audit scheduling

    Duration
    1 day
    Deliverable
    Audit plan

  3. Audit

    Phase 03 / 06

    I test your system the way a real attacker would, with real techniques but without breaking anything or risking your operation

    Duration
    1-3 weeks
    Deliverable
    Evidence per finding

  4. Technical report

    Phase 04 / 06

    Every flaw explained with its CVSS severity, reproducible evidence and how to fix it step by step

    Duration
    1-3 days
    Deliverable
    Technical report

  5. Walkthrough

    Phase 05 / 06

    We go through the report together live, with clear priorities translated into business risk

    Duration
    30 minutes
    Deliverable
    Follow-up session

  6. Retest

    Phase 06 / 06

    Once fixed, I verify the flaws are truly closed and that no new ones have been opened

    Duration
    1-2 days
    Deliverable
    Retest report

SECURE YOUR BUSINESS TODAY

Tell me about your case and get answers about scope, timeline and price in less than 12 hours

GET A QUOTE
Questions?Message me on WhatsApp