Website Security Audit Oldham

What an audit protects for Oldham businesses

The risks depend on what the site does. A takeaway or restaurant taking orders online needs its checkout scripts untouched. A health or care provider collects names, phone numbers and sometimes sensitive details through forms. A manufacturer around Hollinwood may never take a payment online, but its domain sends quotes and invoices, and a spoofed email in its name can do real harm.

An audit looks at all of that while the site is working normally. It differs from a hacked-site clean, which is the job of malware removal, and from a penetration test, where we attempt to break in under written rules, offered only when the scope is agreed in advance. The method follows our Manchester website security audit.

How we run the audit with you

Testing is remote. You give us a temporary admin account plus read access to hosting and DNS where possible, and we keep you updated by email or WhatsApp. When the report is ready we go through it on a video call, and you can remove our access straight afterwards.

If you would sooner hear the findings in person, bring the laptop to our office in M8, about 20 to 25 minutes in along Oldham Road depending on traffic, or we can come out to you in the town centre, Chadderton or Failsworth by arrangement.

The audit in six stages

Your audit pack

• Findings sorted by severity, each with the reason it matters
• Plugins and themes flagged as outdated, abandoned or vulnerable
• Admin accounts that should be removed or given fewer rights
• SPF, DKIM and DMARC results for your domain
• Security header and SSL certificate findings
• Whether backups exist off the server and can be restored
• A fixed quote for the fixes, if you want us to carry them out

Domain and email checks Oldham firms often miss

Many audits stop at WordPress. We also look at the parts around it, because an attacker who controls your domain or email does not need to touch the site at all.

• Missing DMARC Without a DMARC record, anyone can send email that appears to come from your domain. We suggest a monitoring policy first, then tighten it once genuine senders are covered.
• Overloaded SPF records A record that includes every mailing service ever used can pass the ten DNS lookup limit and start failing.
• Registrar without two-factor login The account that controls your domain deserves the same protection as your bank login.
• Dangling subdomains A subdomain still pointing at a cancelled service can be claimed by someone else and used to host pages under your name.
• Partial certificate cover A certificate missing the www version, or pages loading insecure images, triggers browser warnings. Our SSL and HTTPS setup service sorts these out.

Where the audit finds no working off-site copy of the site, our backup and restore service puts one in place.

Frequently asked questions

Audits for firms in Middleton, Ashton, Rochdale and Droylsden

Businesses in Middleton, Ashton-under-Lyne, Rochdale and Droylsden can book the same audit, and our main security audit page explains it in more detail. Everything else we do in the town is on our Oldham hub.

Tell us which website and domain you would like looked at, and we will agree exactly what gets tested and quote for it upfront. Arrange an audit, ring 0161 315 1151 or message 07737 902425 on WhatsApp.