Norwich Web Security

Your website might have
security gaps you don't know about.

I run free, fully passive security audits on Norwich business websites and send you a plain-English report on what's missing — no jargon, no sales pitch.

Get your free audit See what I check
demonstration · norwich-bakery.co.uk
→checking HTTPS···
→content-security-policy···
→strict-transport-security···
→x-content-type-options···
→x-frame-options···
→referrer-policy···
→permissions-policy···
C
3 issues found on norwich-bakery.co.uk 0 critical · 0 high · 3 medium · 0 low — full report generated
What I audit

A thorough passive scan.
No credentials, no intrusion.

Every check uses ordinary HTTP requests — the same view a visitor has. No login, no authenticated access, no probing beyond what your site sends publicly.

01
HTTPS & transport
Confirms encryption is active and properly enforced. An unencrypted site leaks visitor data and hurts search rankings.
02
Security headers
Six browser-level protections most websites skip. Each missing header is a gap that could be exploited.
03
CSP quality
Having a Content Security Policy isn't enough — a misconfigured one can cancel out its own protection. I check for the common mistakes.
04
Form exposure
Contact forms and input fields deserve extra scrutiny. I check whether they're exposing information they shouldn't be.
Going further
Full active scan available
The passive audit is always free and requires no access. For businesses that want to go deeper — with written permission I can run a full active scan: input validation testing, injection probing, and authenticated flow analysis. This surfaces vulnerabilities a passive scan can't see.
Ask about a full scan →
Real findings

Issues found on
Norwich business sites

These are real issue types from recent audits. Domains are anonymised.

Critical Security policy allows malicious code injection restaurant ·co.uk
High Browsers not instructed to always use encrypted connections tradesman ·co.uk
High Protection against fake page embedding is missing salon ·co.uk
Medium Browser features not restricted by an explicit Permissions-Policy header accountant ·co.uk
Medium Visitor information may be shared with third-party sites solicitor ·co.uk
The grading system

One letter.
Instant read.

Every audit produces an indicative grade based on the checks performed. It reflects what a passive scan can see — not the complete security posture of a website.

A
No issues found
Nothing flagged by the passive checks. Good baseline — not a guarantee of complete security.
B
Minor gaps
A few low-severity issues. No immediate risk, but worth addressing.
C
Worth fixing
Medium-severity issues present. Common — several headers missing.
D
Needs attention
High-severity issues. Visitors may be exposed to real risks.
E/F
Act now
Multiple serious gaps flagged. Worth treating as urgent and reviewing with a developer.
How it works

Simple.
No setup needed.

01
Send me your URL
Just your website address. No login, no access, no personal details needed beyond how to reach you with the report.
02
I run the audit
A passive scan checks your headers, encryption, security policy, and more — usually completed the same day.
03
You get the report
A PDF report with your grade, every issue found, and a plain-English explanation of what each one means and what it could lead to.
04
Your call
No obligation. If something needs fixing, I can explain the options or point you toward someone who can help.
About

Web security
for Norwich businesses

I'm dj, based in Norwich. I built the tools that generate these reports to surface the security issues most small business websites have without realising it.

Most web developers focus on how a site looks. Security headers, CSP configuration, and transport policy are often left at defaults — which means they're often wrong. These aren't exotic issues. They turn up on most sites.

The audit is completely passive and free. I don't touch your server, I don't need any access, and there's no obligation. If something needs fixing, I can explain what it takes or point you in the right direction.

6+
security checks per site
A–F
grade based on severity
0
server access required
Free
no cost, no obligation
Get in touch

Want a free audit
for your site?

Drop me a message with your website URL and I'll send the full report back — usually same day.

Norwich-based businesses only. No cost, no obligation, no follow-up unless you want one.

📧
Email
djwebsecurity@gmail.com
💬
WhatsApp
Message me directly