How much does a security audit cost?

Starting from €290 excl. VAT for an express audit (site, DNS, HTTPS, headers, forms, admin access, backups), and from €690 excl. VAT for an in-depth VPS/Docker/Web audit. The backup & monitoring pack starts from €250 excl. VAT for setup, with an optional monitoring subscription.

Do you carry out intrusion tests or pentests?

Only on request, with written authorization, a clearly defined scope and a validated environment. My work is primarily defensive: audit, hardening, remediation and monitoring.

What's included in the backup & monitoring pack?

Setting up automated backups and monitoring: uptime, SSL certificate expiry, disk space and alerts in case of an incident. A support subscription can be attached to keep the infrastructure under control over time.

Security & audit

Web, security, infrastructure and process audits

Understand issues, document risks and decide what to fix first.

Every audit starts with a written scope: authorised assets, access, environment, checks and exclusions. The public express test is indicative; it is not a complete security audit or certification.

Scope my audit

Problems I solve

Uncertainty about the real security level of your site or server
Configuration piled up over time and never audited
Backups assumed to work but never verified
SSL certificates, .env secrets or admin access poorly controlled
No alerts in case of an incident, outage or expiry

What I set up

Express audit: DNS, HTTPS, security headers, forms, admin access, backups
In-depth VPS/Docker/Web audit: SSH, firewall, permissions, Nginx/Traefik, SSL, logs, .env secrets
Prioritized report with a clear remediation plan
Hardening and fixing of critical points
Backup & monitoring pack: uptime, SSL expiry, disk space, alerts
Ongoing monitoring subscription on request

Choose the right scope

Every scope includes an executive summary, technical findings with evidence and limitations, severity and confidence, prioritised recommendations and complexity estimates. A guided review and action plan; remediation and verification can be quoted separately. No destructive tests or unauthorised intrusion.

Website

Identify obstacles in the user journey.

Agreed pages, navigation, forms and mobile layouts
Deliverable: annotated journeys and reproducible issues
Excludes a complete redesign or copywriting

Defensive security

Document observed risks.

Inputs, access, sessions, dependencies and configuration within granted access
Deliverable: evidence, scenarios, impact and remediation priorities
Excludes intrusive pentesting, denial of service and certification

Performance

Find causes of slow loading.

Images, JavaScript, caching, lab measurements and field data when available
Deliverable: contextualised measurements and remedies
Excludes score guarantees or production load tests

Technical SEO

Support crawling and indexing.

Metadata, canonicals, hreflang, sitemap and structured data
Deliverable: indexing issues and a technical plan
Excludes ranking guarantees, link buying and editorial campaigns

Accessibility

Identify barriers to use.

Keyboard, focus, forms, contrast and an agreed sample of pages
Deliverable: reproducible barriers and proposed fixes
Excludes comprehensive certification based on automated tools

Infrastructure

Improve hosting and operations.

Docker, VPS, network, TLS, permissions, backups and monitoring
Deliverable: configuration risks and a recovery procedure to verify
Excludes live restoration or production changes without agreement

Processes and automation

Choose tasks worth automating.

Process maps, duplicate entry, exceptions, APIs and data
Deliverable: prioritised opportunities, constraints and a first n8n scenario
Excludes implementation and unmeasured numerical gains

Maintainability

Prepare future application changes.

Architecture, dependencies, tests, documentation and deployment of accessible code
Deliverable: prioritised technical debt and remediation complexity
Excludes complete rewrites and inaccessible third-party code

Technologies used

NginxDockerSSL/TLSLinuxMonitoring

Defensive security audits carried out remotely for freelancers, SMEs and projects in Mouscron, Tournai, Kortrijk and across Belgium.

Frequently asked questions about the security audit

Want clarity on your security?

Describe your site or infrastructure, and I'll propose the right audit and concrete actions.

Scope my audit Request a free quote

What I set up

Express audit: DNS, HTTPS, security headers, forms, admin access, backups

In-depth VPS/Docker/Web audit: SSH, firewall, permissions, Nginx/Traefik, SSL, logs, .env secrets

Prioritized report with a clear remediation plan

Hardening and fixing of critical points

Backup & monitoring pack: uptime, SSL expiry, disk space, alerts

Ongoing monitoring subscription on request

Choose the right scope