Optional add-on
Website security check
Direct answer: Trendi offers a light, practical website security check for businesses. Run the free light check below for homepage HTTPS, security headers, and common sensitive paths. Results are grouped as Pass / Review / Info with plain explanations. This free tool is not Trendi’s penetration testing product, not enterprise red-team work, and not a promise that your site is hack-proof.
What we test (before you run)
This free tool is not a penetration test. It is a light public hygiene check — presence/absence only. No exploit payloads, no login attempts, no authenticated testing. Paid penetration testing is a separate scoped service with a written NZD quote.
| Check | What it means | How results are labelled |
|---|---|---|
| Homepage HTTPS | Whether the final homepage URL uses https:// and responds. | Pass if reachable over HTTPS · Review if not |
| Security headers | HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy on the homepage response. Short values shown in full; long CSP can be expanded. | Pass when present · Review for missing HSTS on HTTPS · Info for other missing optional headers |
| Sensitive paths | Whether /.env or /.git/config answer publicly. These must never be on the open web. | Pass if blocked or not found · Review if they respond |
| Common admin paths | Whether /wp-admin/ or /admin/ answer. Often a login page — we do not try passwords. | Pass if not found or auth-blocked · Review if something public answers |
| robots.txt & sitemap.xml | Whether the usual crawl files respond. Useful context, not a vulnerability score. | Info either way for this security tool |
Same free runner as /tools/security-check. Presence/absence only — not a pen-test.
After you run
Findings are grouped as Pass (looks fine for this light check), Review (worth fixing or confirming with your developer), and Info (context only). Short header values such as X-Frame-Options and X-Content-Type-Options are shown in full; long Content-Security-Policy values can be expanded.
What this is not
- Not an enterprise red-team or full application penetration test
- Not a PCI, ISO or cyber-insurance compliance audit
- Not destructive testing, social engineering or physical security
- Not a guarantee your site cannot be hacked afterwards
- Not scare-copy that invents urgency you do not have
Penetration Testing
Need a scoped penetration test instead of this light check? Trendi offers penetration testing as a separate service. Quotes are on enquiry in NZD. No fixed Stripe price. If you need a large compliance or certified third-party report beyond what we should take on, we will say so rather than stretch either offer.
How it fits with SEO work
The monthly Trendi package covers Indexed, Found and Mentioned work for search and AI visibility. This security check is separate and optional. A free site check still covers crawl and index basics. Use this page when you want a focused security pass on top.
Pricing and booking
Run the free light check above anytime (rate-limited). For a written findings pass we do for you, or a scoped penetration test, email us — there is no Stripe checkout for those yet. Email [email protected] with your website URL and one sentence on what the site does. We reply within one business day with whether we can help, what is in scope, and a fixed NZD price before anything starts. For a full pen-test quote, use the penetration testing page instead.
FAQ
Is this a penetration test?
No. This page is the light security check. Penetration testing is a separate service with quotes on enquiry. Use this check for a practical hygiene pass. Use penetration testing when you want a scoped test and a formal quote.
Will you hack my site or guarantee it is safe?
No. We do not run destructive attacks, and we do not promise that a site is hack-proof afterwards. You get a readable list of issues you can fix or pass to your developer.
How do I book it?
Use the free runner on this page for an instant light pass. For done-for-you findings or a pen-test quote, email [email protected] with your site URL and what you use the site for. We agree scope and price by email before paid work starts.
Does the monthly SEO package include this?
No. SEO and AI-visibility work is separate. This security check is an optional add-on. Basic crawl and index checks already sit inside the SEO package. This offer goes further into security findings.
Contact · About · SEO pricing · Home