Home  ›  Pricing  ›  Expert
Expert audit · reviewed by a professional

Know how to fix it — checked by a human.

Everything in Essentials, plus 14 deeper security scans and a cybersecurity professional who reads your specific site before you do — and tells you what actually matters first, and what can safely wait.

$309 $497 Limited-time offer
One-off · AUD · report within 3 business days · no subscription
Get Expert — $309 See a sample report
49 checks · a cybersecurity professional reads every report · free re-scans for 90 days

Who this is for

Owners who want the complete picture and a human judgement on it — which findings actually matter for their site this month, and which can wait. It's also the right choice if you take payments, hold sensitive information, or have a developer you'd like to hand precise instructions to. No software can make the "what matters most" call; a person can.

What we are — and what we're not. AegorIQ is a website auditor. We check your website and tell you what we found, why it matters, what it could cost you, and exactly how to fix it. We don't fix it for you, and we're not web designers or developers — we're the independent party that checks your website. You can hand our report to whoever looks after your site, or do it yourself; every finding is written to be actionable either way.

Everything in Essentials — plus all of this

Everything in the Essentials audit
All 35 Essentials checks, in fullYour policies read and graded, business identity, email spoofing protection, domain security, site security, trackers, performance and AI readiness. See the full Essentials list on its own page — every line of it is included here.
A human being reads it
Expert review by a cybersecurity professionalThey read your specific site before you do, and tell you what actually needs your urgent attention and what can safely wait. No software can make that call.
Step-by-step fix for every issueNumbered instructions you can hand straight to your web developer.
Prioritised remediation planWhat to fix first, and what can safely wait — so you're not staring at a list of twenty things.
AI Readiness action planYour on-page AI Readiness score, plus the specific, prioritised steps to help AI assistants like ChatGPT and Perplexity find and recommend your business — including the off-site factors a scan alone can't fix.
Compliance obligations & deadlinesThe dated legal obligations that apply to your business, laid out so nothing sneaks up on you.
14 deeper scans Essentials doesn't run
Exposed sensitive filesAre private config files, admin pages or repository data sitting on your site for anyone to download? Attackers scan for these daily.
Directory listingCan a stranger browse and download every file in your folders — backups, spreadsheets, invoices — just by visiting the folder? "Not linked" isn't the same as "not public".
WordPress XML-RPC exposureFor WordPress sites — the legacy XML-RPC feature can let attackers try hundreds of passwords in a single request, and overload your site.
Leaked API keys & secrets in your codeAre your passwords or access keys visible in the code your site sends to every visitor's browser?
Exposed backup & config filesCan anyone download a full copy of your website — often including your database password?
Payment-skimming surface (third-party script integrity)Could a hacked third-party script steal card details at your checkout? This is the attack that hit British Airways and Ticketmaster.
Insecure cookiesCould someone hijack a logged-in customer's session?
Subdomain takeover riskCould someone claim an abandoned part of your domain and phish your customers from your own web address?
Exposed non-production subdomainsAre your test, staging or admin sites publicly visible? They're usually far less protected than your real site.
Exposed service portsAre there admin doors left open to the internet? A safe, limited check.
TLS / encryption strengthDoes your server still accept old, insecure connections that fail modern standards?
Mixed contentAre parts of your secure page loading insecurely — quietly breaking the padlock your customers rely on?
Advanced email security (MTA-STS & TLS-RPT)Is your email encrypted on its way to your customers, and are you told when it isn't?
Performance & SEO (Google Lighthouse)How fast is your site really, and can Google read it properly? Includes Core Web Vitals.
Accuracy guarantee. In addition to your rights under the Australian Consumer Law. Refund policy. Optional 30-minute walkthrough call available at checkout.
Expert

The whole picture, read by a professional.

All 49 checks, every fix spelled out, and a human telling you where to start.

Get Expert — $309 Start with the free Scorecard
Essentials — $10935 checks, every issue named in plain English. Concierge — $1,490The full audit, a call, your policies, and monthly expert re-scans for a year.