IT Consultancy
Free external security check

Is your website and office network actually secure?

Attackers do not need a sophisticated plan. They look for the same gaps we check in under a minute: missing HTTPS protections, weak security headers, exposed remote access and dangerous open ports.

Check my website Check my office IP
  • No login required
  • Results in seconds
  • Plain-English report
Security posture Scan complete
86Grade B
  • HTTPS and certificate Healthy
  • Email authentication Protected
  • Security headers 2 fixes
  • Exposed services 1 high risk
Typical report extract itconsultancy.org
HSTS missing1 high-risk finding
TLS validCertificate healthy

Built for teams without a dedicated security department

  • Websites
  • Office broadband
  • Remote access
  • Email domains
What we do

Security that closes the gaps attackers look for

Start with a free check, then work with us to fix what matters and prove it stays fixed.

Web security

We harden the public face of your business: TLS, security headers, cookies, email authentication and the web application itself.

  • HTTPS, HSTS and certificate management
  • Content Security Policy and browser defences
  • Email spoofing protection with SPF, DKIM and DMARC
  • Security review and remediation support
Run a free website check

Office security

Your broadband IP is your front door. We look for exposed remote access, unsafe services and the weaknesses attackers scan for first.

  • Exposed RDP, SMB, VNC and database services
  • Public IP reputation and blocklist checks
  • Network ownership and reverse DNS validation
  • Firewall, VPN and remote-access review
Run a free office IP check
How it works

From unknown risk to a clear plan in three steps

  1. 01

    Run the free check

    Enter your domain or office public IP. We check only what a normal visitor or attacker could see from the outside.

  2. 02

    Read the plain-English report

    See a score, the findings that matter, and the exact change that removes each risk. Your report is emailed to you.

  3. 03

    Fix it with confidence

    Implement the fixes yourself or ask us to. We can prioritise, remediate and verify the result.

What we check

The controls that make the biggest difference

Our free checks are safe, passive where possible, and focused on issues that create real-world risk.

Start with your website
HTTPS & TLSCertificate validity, expiry and protocol strength.
Security headersHSTS, CSP, clickjacking and MIME protections.
Email authenticationSPF, DMARC and DKIM posture for your domain.
Exposed servicesAuthorised port checks for RDP, SMB, databases and more.
IP reputationBlocklist and network intelligence on your office IP.
Cookie safetySecure, HttpOnly and SameSite flags on public cookies.
Why IT Consultancy

Security advice you can act on, not a wall of jargon

Built for real businesses

We focus on the controls that reduce the chance of a breach or ransomware event, not checkbox compliance.

Clear priorities

Every finding includes why it matters and how to fix it, ordered by the risk it creates.

Help when you need it

Use the free report yourself or ask us to implement and verify the remediation for you.

Questions

Before you run a check

Is the check really free?

Yes. You can check one domain and one office IP per day at no cost. We ask for your email so we can send the report and follow up if you want help.

Do you access my website or network?

The website check only requests public pages and inspects the response, TLS certificate and DNS records. The office IP check is passive unless you explicitly tick the authorisation box to run the limited port check.

Is this a penetration test?

No. It is an external security posture check. It identifies common weaknesses but does not exploit them, test business logic or replace a full penetration test.

What do you do with my data?

We use your email to send the report and follow up about the service. We keep leads for up to 12 months and do not sell your data. Read the privacy notice.

Can I check someone else's website?

Only if you own it or have permission to assess it. By submitting a target you confirm you are authorised.

Start now

Find out what an attacker can see

Run a free check and get a clear report in under a minute.

Check my website Check my office IP