You tell us your website address, we audit it, and you get the report — what, why and the fix, explained in plain English. Nothing to install, and we never ask for your password.
We never ask for your password, your hosting login, or access to anything. Everything we read is already visible to the outside world — which is exactly why it's worth reading.
We check straight away whether we can actually read your site properly. If we can't deliver a complete report, we tell you before you pay — not after.
Your configuration, your certificates, your DNS and email records, your links — and the inside of your privacy policy, terms and refund pages. Every finding comes from a real check.
What, why and the fix — explained in plain English. On Expert, a security professional reads it before you do and gives you their advice.
You don't need to know the jargon. Here's what each one actually means for your business.
Australian law expects certain things on your website. Does your privacy policy actually say what it's meant to? Do your refund terms accidentally break consumer law? Can customers see who they're dealing with?
Most small sites are hacked through a known weakness nobody got around to patching. Is your website software out of date? Does it show the padlock properly? Are there doors left open that shouldn't be?
This is the one that costs businesses real money. Without the right settings, a scammer can send an invoice that looks exactly like it came from you — to your own customers. And could someone take your domain name?
More customers now ask ChatGPT for a business like yours instead of searching. If those assistants can't read your site properly, you simply don't come up — and most owners have no idea whether they do.
Every finding in your report is laid out the same way, so you never have to decode a severity label or Google a technical term.
Every issue named plainly, alongside the things your site already gets right. We credit what's working, not just what isn't — and where a check couldn't run, we say so rather than showing you a green tick.
What each finding actually means for your business, your customers and your reputation. Not a severity score and a shrug — the real-world consequence, in a sentence you could read aloud to your accountant.
Practical steps you or whoever looks after your site can follow. Where a fix genuinely needs a professional, we say that too, instead of pretending it's a five-minute job.
None of these is technical trivia. Each one is a place where a customer, a regulator or an AI decides whether your business looks like it can be relied on.
How your site is configured and protected against the ordinary, common risks — not exotic ones.
We open your privacy policy and read it, rather than checking that a link exists.
The things Australian law actually asks for: your policy, your refund wording, your ABN.
Whether the site loads and behaves properly for the person trying to use it.
Whether an AI can read your site well enough to describe your business accurately.
Fixing your website is quiet work — no customer sees the policy you rewrote. Every paid review earns a dated badge you can display, so the work becomes visible. It links to a page anyone can check, and it moves up as your website does.
Yours the moment your review lands, whatever it finds.
A score of 80 or above, with no critical issues outstanding.
The Expert deep scan run, with nothing left outstanding in it.
A badge is not a certification and not a guarantee. It records that an independent review happened on a date, and what that review found. It stays current for 12 months, then it's re-earned from a fresh scan. Displaying it is entirely optional. How the badge works →
The free Scorecard is a real audit, not a teaser. Less than five minutes of questions, and your score appears on screen straight away.