Websites that
stay safe.
A beautiful site is only half the job — it also has to stand up to the real-world threats of the open web. We offer fixed-price security packages, and bring in our partner when a deep pentest is needed.
See the security packages →Concrete security — at a fixed price
Two packages that fit any site, no matter who built it. Need more than that, and we bring in our partner for a deep penetration test.
Security Scan
An automated vulnerability scan of your existing site, a signed PDF protocol, and a prioritised fix list. You know exactly where you stand.
Security Package
Everything in the scan — plus we fix what it finds: patches, hardening and configuration. Then a re-scan that confirms the holes are closed.
Our own packages — partner for depth
We deliver the security packages above ourselves. When a project needs more — manual penetration tests that think like a real attacker — we bring in dedicated professionals who live and breathe security every day.
That means you never have to juggle two vendors — we coordinate the security work directly with our partner, so you get a single point of contact and a result you can trust.
Pentesting.se is a Swedish specialist in penetration testing and vulnerability assessment. When your project needs hands-on security work, they are the people we reach out to — and through us, you get access to their expertise at a straightforward, quoted price.
A free scan and report with every website
Every design bought from us comes with a complete security scan and a written report — no extra cost, no fine print. It's there so your site stays safe, and so you can feel confident that what we ship is solid from day one.
What's covered in the free scan
- Automated vulnerability scan of your live site
- Review of exposed services and ports
- SSL/TLS and security header check
- Common misconfiguration checks
- Written report with findings and severity
- Recommended next steps — clearly explained
Deeper security services on request
When the free scan uncovers something worth a closer look — or when your project simply demands more than a surface check — we can arrange dedicated security work through pentesting.se. Contact us for a quote tailored to your site.
Penetration Testing
Manual, hands-on testing that goes beyond automated scans — real attackers think creatively, and so do our partners.
Vulnerability Assessment
A structured review of your application and infrastructure to identify weaknesses before someone else does.
Hardening & Remediation
Concrete, prioritised fixes — we help you close the gaps, not just list them in a PDF.
Security Advisory
Guidance on secure architecture, authentication, and data handling — before the code is even written.
Written Reporting
Clear reports in plain language, suitable for both your developer and your stakeholders.
Ongoing Monitoring
Recurring scans so new vulnerabilities don't slip in as your site grows and the threat landscape shifts.
The Cybersecurity Course — for ordinary people
We've published a complete free course in digital self-defence in plain language — no jargon, no scare tactics. Eighteen episodes taking you from "why would anyone hack me?" to a finished personal security plan.
Completely free, no prior knowledge and no sign-up. Each episode takes under ten minutes and ends with concrete steps you can take right away.
Questions about cybersecurity
Is the security scan really free?
Yes. The initial security scan is included free with every web design delivery, and can also be ordered separately. You receive a written report listing the vulnerabilities found and recommended fixes.
What is the difference between a security scan and a pentest?
A security scan is automated and finds known vulnerabilities — fast and broad. A pentest is manual, in-depth, and simulates a real attacker trying to break into specific systems. Scanning suits ongoing hygiene; pentesting is for critical applications or compliance. In-depth pentesting is done via our partner pentesting.se.
What vulnerabilities do you find?
OWASP Top 10 categories: SQL injection, XSS, CSRF, broken authentication, misconfigured security headers, insecure direct object references, missing encryption, and more. Plus infrastructure issues like outdated dependencies, exposed .git/.env files, and weak TLS configuration.
Do I get a remediation report or just a list?
You receive a structured report (in Swedish or English) with every finding categorised by severity (critical/high/medium/low), a technical description, and a concrete remediation recommendation. Written so both your developer and management can understand it.
What happens if you find something critical?
Critical findings are flagged to you immediately — not in a report a few days later. We help fix the vulnerability right away if you want, or support you in doing it yourself. No extra charge for emergency response.
How often should I scan my website?
At minimum after every major change in code or infrastructure. For active sites we recommend monthly automated scanning, which is included in the Ongoing Care plans. The threat landscape changes fast, and new vulnerabilities surface in libraries and platforms you already use.