Complimentary website security check
Get a complimentary baseline website security check from OSKY.
A website can look perfectly normal while still exposing information, files or configuration issues that increase its security risk.
A practical starting point
OSKY’s complimentary baseline website security check provides organisations with a quick external review of several important security controls and common exposures. Our baseline check looks at security issues that can be assessed externally from your website’s public-facing environment.
We check whether your website is using HTTPS correctly and review several important aspects of its TLS configuration, including:
Security headers help browsers protect visitors from certain types of attacks. We check for common protections including:
Websites can sometimes reveal technical information that makes it easier for attackers to understand the technology running underneath them. We check for publicly visible information such as:
We perform a small number of non-invasive checks for files or directories that should not normally be publicly accessible, including:
We only flag an exposure where a request returns publicly accessible content consistent with the file or directory being tested.
Clarity, not complexity
If we identify potential issues, we’ll provide you with a straightforward summary explaining:
Our aim is to give you a practical starting point for understanding your website’s externally visible security posture.
There is no obligation to engage OSKY for further work.
This baseline check is performed entirely from outside your website. You do not need to provide:
This makes it a simple way to identify some of the security issues that are visible from the public internet.
Three simple steps
Submit your website URL and a few details using the short form below.
Once we receive your request, the OSKY team will review the website and carry out the applicable baseline checks.
If we identify anything that warrants attention, we’ll explain what we found and recommend appropriate next steps.
In some cases, an issue may require further investigation or access to the website environment before its significance can be determined.
Start with a baseline
Tell us where to look and we’ll take it from there.
No login or backend access required.
A few useful answers
Yes. This baseline website security check is complimentary, and there is no obligation to engage OSKY for further work.
No. The baseline check is performed entirely from outside your website. You do not need to provide CMS credentials, hosting credentials, server access, administrator accounts or database access.
No. The complimentary check is intentionally limited to selected issues that can be identified externally without administrative access. It is not a penetration test, vulnerability assessment or certification that a website is secure.
OSKY performs only the external checks described above and does not attempt to exploit identified vulnerabilities, alter website content or gain unauthorised access to systems.
If we identify anything that warrants attention, we’ll explain what we found and recommend appropriate next steps. In some cases, an issue may require further investigation or access to the website environment before its significance can be determined.
When you need to go further
Our complimentary check is intentionally limited to issues that can be identified externally without administrative access.
For organisations requiring a more comprehensive assessment, OSKY can undertake a deeper website security audit that examines the website environment, configuration, software and security controls in greater detail.
This may include appropriate access to the CMS, hosting environment or other systems depending on the scope of the assessment.
The complimentary baseline website security check is designed to identify selected security issues that are observable from a website’s public-facing environment at the time of testing. It is not a penetration test, vulnerability assessment or certification that a website is secure. Because no authenticated or backend access is used, vulnerabilities may exist that cannot be detected through these checks. OSKY performs only the external checks described above and does not attempt to exploit identified vulnerabilities, alter website content or gain unauthorised access to systems.