Close the most common doors.
For the business, its email, its code and its applications: readable checks, done on a copy or on public data, always with your written consent. No penetration testing.
What is delivered, what is excluded, the price.
Small-business cyber check-up
from €99Half a day to close the most common doors: passwords and two-factor authentication, backups, protection of your email against spoofing, access for staff and former contractors. You leave with a short ranked list, and what has already been fixed.
Check-up of AI-written code
from €149Your site or tool was produced with an AI and you are not sure what it contains? I read it on a copy: forgotten secrets, dubious dependencies, obvious flaws, what will break at the next change. Short report, ranked findings, nothing run on your side.
Regression guard
For sites and code written with AI, which can break without warning: I set up tests with known answers, a control that must stay at zero and a fingerprint of sensitive files. If a change breaks something, it is flagged before going live.
from €900 + €90 / month follow-up
Set up on an existing site or a new project. Scope defined after a first conversation. You can start with the code check-up (from €149): it is deducted if the guard is ordered within the month.
Security review
For an application, an internal tool or a live service: I read the code on a copy, without running anything on your instance, and deliver a readable report that ranks every finding — critical, to strengthen, comfort — with the evidence and the proposed fix.
- Web applications, internal tools, scripts, firmware
- Work on a copy, never on production
- Three angles: access and configuration, input and execution, secrets and data
- PDF report, findings cited file by file
- P1 / P2 / P3 remediation plan, then a call to decide
On quote after a first conversation
No penetration testing. No client data read without the owner's written permission.
Prices in euros, excluding VAT. The quote states the applicable VAT.
Short answers.
What is a security review?
I read an application's code on a copy, without running anything on your instance: access and configuration, input and execution, secrets and data. The report cites each finding with its evidence and the proposed fix, followed by a P1 / P2 / P3 plan. It is not a penetration test: no attack is launched against your service.
Do I need to give you admin access?
For an audit or the security watch, no: everything is done on public data. For fixes or maintenance, limited access may be needed; it is then written into the quote, with a prior backup and a possible rollback.
Tell me what's wrong.
Your site's address, what bothers you, and what you want to achieve. Three lines are enough. I reply within two working days.