Is Your Website Really Secure?

Whether your website was built by AI, a developer, or an agency, security vulnerabilities can expose your business and customers. Let JohnDigital's security engineers assess your website and help you identify potential risks.

Test My Website KSh 5,000 Talk to a Security Engineer

Defined authorization Confidential PDF report Recommended fixes

Anything accessible remotely can become a target.

A website, web application, mobile app, API or connected service can expose your organisation even when it appears to work exactly as expected.

Security does not depend on who wrote the code. It depends on how the system is configured, what it exposes and whether its controls stand up to defined, authorized checks.

Choose the right level of support.

Start with a clear baseline, fix what matters and maintain visibility as your website evolves.

One-time assessmentKSh 5,000

Website Security Assessment

A baseline security assessment for one eligible website, completed only after scope and authorization are approved.

  • Defined, authorized security checks
  • Selected common vulnerability identification
  • Confidential PDF security report
  • Severity ratings and recommended fixes

Comprehensive penetration testing requires separate scoping and quotation.

Test My Website KSh 5,000
After assessmentCustom quote

Security Remediation

Ask our engineers to fix identified vulnerabilities after you receive your security report.

  • Approved remediation scope
  • Engineer hourly rate
  • Estimated working hours
  • Optional verification after fixes
Discuss remediation
Optional monthly careKSh 3,000/month

JohnDigital Security Care

Ongoing basic monitoring and maintenance for organisations that want regular visibility into website security.

  • Scheduled basic security checks
  • Notifications about identified risks
  • Monthly security status report
  • Maintenance visibility as the site changes

Security fixes and incident response are quoted separately. This service is not insurance.

Ask about Security Care

From website submission to ongoing care.

A simple journey with clear approval and authorization boundaries.

01

Submit your website and authorization

Share the website, confirm your authority and provide the information needed for an eligibility and scope review.

02

Pay after scope approval and receive your report

Once approved, pay KSh 5,000. We complete the defined checks and deliver your confidential PDF security assessment report.

03

Fix vulnerabilities and subscribe to ongoing care

Use the recommendations with your team, request a remediation quote or add JohnDigital Security Care for ongoing visibility.

A report your team can act on.

You receive a confidential PDF that organises identified risks by severity and explains recommended next steps in clear language.

Preview uses fictional data and does not represent a real customer or live assessment.

ConfidentialWebsite Security Assessmentsample-business.test · Fictional preview
CBaseline posture
1High2Medium1Low
High
Security header configuration

Selected protective response headers were not detected.

Medium
Administrative login exposure

Public access increases automated attack traffic and should be reviewed.

Low
Software information disclosure

Reduce unnecessary version and platform information in responses.

Prepared for demonstration only · JohnDigital Security

Authorization always comes first.

Submitting a website or making a payment does not authorize testing. JohnDigital must first confirm eligibility, ownership or authority, the exact scope and the approved checks.

No comprehensive penetration testing, exploitation, denial-of-service activity or testing outside the written scope is included in the KSh 5,000 baseline assessment.

Start with a clear security baseline.

Submit one eligible website for review. Payment is requested only after JohnDigital approves the scope.

Test My Website KSh 5,000Talk to a security engineer