Security resources

Practical guidance for owners and developers of small-business websites.

Last reviewed: 2026-10-18

OWASP Top 10:2025 in plain English

The ten most critical web application risk categories, explained for small-business sites.

Common vulnerabilities on SME websites

The issues that show up most often on brochure, booking and e-commerce sites, and how to fix them.

Our passive scanning methodology

Exactly what we check, what we never do, and how findings are graded.

Security best practices

A baseline for headers, TLS, admin access, plugins, backups and logging.

SPF, DKIM and DMARC

How to stop criminals sending email that appears to come from your domain.

Find out what your website reveals

Run the free passive mini-scan in under a minute, or ask for a quote for the full report.