Cybersecurity Audit
Your website is your front door. Is it locked?
A scored, outside-in review of your public website — the same view an attacker gets. No logins, no installs, no disruption.
Watch: is your website’s front door locked? · 45 sec
7 potential issues found
Illustrative score. Ratings: 90–100 Strong · 75–89 Good · 60–74 Needs work · 0–59 At risk.
What we check.
Only what any visitor’s browser receives. We never send attack traffic, try logins or probe hidden pages.
Platform & software versions
Your CMS version against the current release, and any version details your page code gives away.
Known vulnerabilities
Published CVEs for every version we can detect — the first things attackers look up.
Encryption where it counts
HTTPS on your home, financing and privacy pages.
Credit application security
Whether your credit app runs on-site or through a vendor, and that it’s served securely.
Trackers on financing pages
Ad and tracking tags loading on pages where customers enter financial information.
Privacy policy & breach history
A financial-data (GLBA) section, a named privacy contact, disclosed trackers, and any public breach reports.
PHP version, plugins, security headers, admin logins and exposed files can’t always be seen from outside. When they can’t, we say so — never guess — and give your IT team or developer the exact next step.
FTC Safeguards Rule
Know where you stand before the regulators ask.
Dealers that finance or lease are covered by the FTC Safeguards Rule. Our audit shows how ready your public website looks — where customer financial data is collected, how it’s protected and what your privacy policy discloses.
A readiness assessment, not a compliance certification.
Why it matters
Attackers look from the outside. So do we.
Many website attacks start with what’s publicly visible: an outdated platform, a known vulnerability, an unprotected page. We find those gaps first — and tell your web team exactly how to close them.
Outside-only, by design
A passive review of your public website. No access, no internal systems, no penetration testing.
Scored like our AI audits
One clear score out of 100, so leadership sees where you stand at a glance.
Fixes your team can ship
Every finding ranked by severity, with suggested code in one appendix.
What you get.
01
Security score
Earned and lost points, a clear rating and every potential issue called out.
02
Ranked findings
Critical, Warning, Opportunity or Pass — what we found, why it matters and the fix.
03
Priority checklist
What to do this week, in the next 30 days and on an ongoing basis.
04
Code appendix
Suggested fixes gathered in one place for your web team.
Questions, answered.
What is a website cybersecurity audit?
A scored, outside-only review of the security risks visible on your public website — software versions, known vulnerabilities, HTTPS, credit application security, trackers and privacy policy — with ranked fixes.
Will it affect my live website?
No. The audit is passive and outside-only. We don’t log in, install anything or test your internal systems.
Is this a penetration test?
No. It’s an outside-in review of what your public website reveals — a fast, low-cost first look that shows where deeper work may be needed.
Does it certify FTC Safeguards Rule compliance?
No. It’s a readiness assessment of your public website. Internal areas — system access, staff MFA, phishing defenses and your written security program — are outside its scope and should be reviewed with your IT provider.
How is the score calculated?
Each verified check earns full, half or no credit depending on its level. Checks we can’t verify from outside are left unscored and listed for your IT team, so the score reflects only what we could actually see.
Can I combine it with an AI Visibility Audit?
Yes. Both reports are scored the same way, so you can see AI visibility and website security side by side.