Websites and web applications
We check the agreed publicly accessible areas, features and interfaces for security vulnerabilities.
Online security check
How secure are your website and online services?
A focused penetration test reveals where vulnerabilities can be exploited in practice. With a technical partner, we examine the systems you authorise and give you concrete next steps.
What the security check examines
Access and permissions
If included in the engagement, we examine login and user roles: can users access data or features they should not be allowed to use?
Practical impact
Findings are verified within the authorised scope. The report explains what a confirmed vulnerability could mean for your business.
We agree in advance which systems and testing depth make sense. The aim is actionable findings for your own website and the agreed online services.
How the check works
1. Free introductory call
You share your website, your concern and the responsible contacts. We discuss whether the check fits and what scope you need.
2. Proposal and written permission
You receive an individual proposal. Technical testing starts only after the agreement and authorisation have been signed.
3. Testing within the agreed scope
The named technical partner tests only authorised targets during the agreed window. Critical findings are reported through the contact route agreed beforehand.
4. Report and next steps
You receive findings, priorities and concrete remediation guidance. We discuss what your IT team or web provider should address first.
Your written permission sets the boundaries
An enquiry does not authorise a test. Before testing, we agree the following in writing:
- Which domains, applications and online services may be tested and which are expressly excluded.
- That you have authority to grant permission and have obtained any required consent from other operators or providers.
- The testing window, depth, permitted test types and measures to protect ongoing operations.
- Responsible contacts, reporting routes and conditions for pausing or stopping the test.
- Confidentiality, handling of test data and agreed retention or deletion.
A report you can act on
For each confirmed finding, we document the affected area, severity and potential practical impact. You receive priorities and remediation guidance for your technical contacts.
The report also states the scope actually tested and the limits of the assessment. A later retest of fixed issues can be agreed separately.
Questions before commissioning a test
Is this a penetration test?
Yes, a focused penetration test within an agreed scope. We examine authorised websites and online services for vulnerabilities and verify findings in a controlled way. It is not a blanket security certificate.
What does the security check cost?
We discuss scope and costs after the free introductory call. You receive an individual proposal before commissioning the test.
What is excluded?
Internal networks, social engineering and load attacks are not part of this offer. Fixing vulnerabilities is a separate engagement. A check cannot guarantee that every possible vulnerability will be found.
What if nothing is found?
If we find nothing, the agreed fee is refunded and you still receive the report. It describes what was tested; it does not guarantee complete security.
Should I send credentials with my enquiry?
No. Your website address and a brief description of your concern are enough for the introductory call. If test accounts are needed, we agree how to provide them securely after authorisation.
Interested in the security check?
Book a free introductory call or enquire directly. Getting in touch does not commit you to an engagement.
Artur Hammerschmidt · 0176 96037579 · ah@escapeuniverse.de