Free, no strings attached
Free security audit of your website
We check what anyone can see of your website from the outside, without attacking it and without touching anything. You receive a written report that ranks the issues we find by severity, with a proposed fix for each one. For a shop, a clinic or a riad, it is the simplest way to know where you stand.
In short
The free security audit from Tourak Digital Group is a passive check of your public website: HTTPS certificate, security headers, CMS and plugin versions, exposed sensitive files, forms and spam protection, backups, and SPF, DKIM and DMARC email settings. No penetration test, no attack. You receive a written report ranking issues by severity, with a proposed fix for each. You must own or be responsible for the site. Request it through the form or on +212 7 88 09 29 51.
Request your free security audit
A passive check, no attack
We run no penetration test, no login attempt, no flood of requests. We read what your website shows publicly, as a careful visitor would, or as an attacker preparing a move would.
Your site stays online and nothing is changed. And we only start the audit once you certify, in the form, that you own or are responsible for the site.
What we check
- HTTPS and certificate. Validity, expiry date, automatic redirect from http to https, content still loaded over http.
- Security headers. HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
- CMS and plugins. WordPress or other CMS version, visible themes and plugins, and the known vulnerabilities that affect them.
- Exposed sensitive files. Forgotten backups, .env or .git files, installation scripts, folders that list their contents.
- Forms and spam protection. Bot protection, a token against forged submissions, submission limits.
- Backups. What you tell us about your copies and your hosting provider, and any archives left publicly reachable.
- Domain email. SPF, DKIM and DMARC, so nobody can send fake emails in your name and yours do not end up in spam.
The report
Each issue is ranked by severity: critical, high, medium or low. For each one, the report states what we found, the concrete risk for you and the proposed fix. If we see something serious during the audit, we call you without waiting for the report.
Your current provider can make the fixes, or we can, with a written quote in dirhams.
Why deal with it before trouble starts
A hacked website can show spam pages, send your visitors elsewhere, be flagged as dangerous by Google or be used to send fraudulent emails in your name. Cleaning up afterwards costs more than prevention, and not all the visits lost in the meantime come back.
The group describes its protection work on the website security page of Tourak Digital in France (in French). If your site needs rebuilding, ask for a free demo. If it is sound but gets few visits, the free SEO audit is the next step.
Frequently asked questions
Can the audit break or slow down my website?
No. We only look at what the site shows publicly, with a handful of normal requests. Nothing is changed and no attack is launched.
Why must I certify that I own the site?
Because we do not audit someone else’s website without their agreement. The box in the form is required and it is checked before the request is recorded.
Do you run penetration tests?
Not in this free audit. It stays passive and non-intrusive. A penetration test is arranged separately, with a written and signed scope.
My site runs on WordPress with another host. Is that possible?
Yes. The audit covers the public website, whatever the CMS, the host or the agency that built it.
Is the security audit really free?
Yes, with no commitment. The report is yours, whether you make the fixes with us, with your provider or yourself.
Our other free offers
Free SEO audit
A written report and a prioritised action plan to win visits from Google, visits that add up month after month.
Free website demo
A mock-up of your future website, built from your details. You see it before you order anything, with no obligation.