Website Security Audit Leigh

What a security audit means for Leigh websites

Many sites in Leigh grew in pieces. A maker at Leigh Spinners Mill starts with a portfolio, bolts on a shop, then adds a commission form that accepts file uploads. A logistics firm on the A580 adds a customer login so clients can download delivery notes. Each addition is a door that should be checked.

The audit examines those doors on a site that appears to be working normally. We do not clean infected files during an audit, and we do not run a penetration test unless that is agreed in writing. If we find signs of an existing hack, we stop and tell you, because that needs malware removal in Leigh rather than a report. The wider method is on our Manchester website security audit page.

Remote testing, with meetings at our office or yours

Every check can be done from our desks. You create a temporary administrator account and add limited hosting access if your host allows it, and we never ask for passwords by plain email. Findings are presented on a video call with a shared screen. To meet instead, our office in Cheetham Hill is roughly 35 to 45 minutes from Leigh by the East Lancashire Road, depending on traffic, or we can visit you by arrangement.

From scope to report

What lands in your inbox

• A plain-English report with findings ranked high, medium and low
• A list of outdated or abandoned plugins and themes
• Form and upload findings, including where files are kept
• A user list with suggested role changes
• Security header and HTTPS results with recommended values
• Notes on backups and whether a restore has been tested
• A fixed quote for the fixes, if you want us to do them

Weak spots we look for on maker shops and trade portals

• Nulled themes and plugins. Premium themes downloaded from unofficial sites often hide backdoors. We check licence status and compare files with official copies.
• Upload forms that accept anything. Commission and quote forms should limit file types and sizes, and store files where they cannot run as code.
• Customer portals. Client login areas need password rules, rate limiting and private pages that cannot be reached by guessing the address.
• Payment set-up on WooCommerce. We note whether card details are taken on the payment provider’s own page or inside your checkout, since the second needs closer care.
• Form entries kept for years. Many form plugins store every enquiry. We note what is kept and suggest a retention setting; on the legal side we follow published ICO guidance, and you should take advice for your situation.

Certificate and mixed content problems go to our SSL and HTTPS setup team, and sites running tracking scripts can use cookie consent setup for the banner and script blocking.

Frequently asked questions

Website security audits beyond Leigh

The same check is available through website security audits in Bolton, Eccles and Salford, and our Manchester audit page lists everything in scope. For all our other local services, see services in Leigh.

Share your site address and anything that already worries you, and we will suggest a scope and send a fixed quote before any testing begins. Book a security audit quote, call 0161 315 1151 or WhatsApp 07737 902425.