Skip to main content

Security

Security for the site and the application

before someone else finds the gap

Most break-ins on company sites are not aimed at that company. A scanner looks for known holes. I harden the site so the scanner finds nothing, and so forms do not become a spam channel.

What you get

  • A configuration review against known vulnerability classes
  • Security headers: CSP, HSTS, and the rest, set and checked
  • Bot protection on forms and request limits
  • Secure cookies and sessions
  • A report ordered by real risk

Who it is for

For companies that collect customer data, sell online, or have a login. For teams that received a vulnerability report and do not know how serious it is.

The review is quoted after I see the site. Ongoing security updates sit in care plans from 400 PLN a month.

Questions

Do you run penetration tests?

I review configuration and known vulnerability classes. That is not a formal penetration test with a certificate. If a contract requires that audit, I say so and point you to a specialist firm.

What is CSP?

A header that tells the browser where scripts may load from. Set correctly, it blocks foreign code even if someone managed to inject it.

The site is small. Is this a real problem?

Scanners do not check company size. They look for outdated software with a known hole. A small, unattended site is an easier target.

← Full catalog

Start a project

A short brief is enough — within 24h we reply with the next step: scope, ballpark ranges, and a realistic timeline. No spam, no pressure.

Project inquiry

What outcome do you want?

Reply within 24h

Project brief · ~3 min

The clearer the business goal, the faster you get a useful quote.

Reply in 24hNo spamYou own the code
About you
Project

Project type

Ballpark budget

Brief details

0 characters — more context helps us quote accurately

By submitting, you agree we may process your data solely to respond to your inquiry. Privacy policy

Discovery call

Prefer a call over the form?

Book 15–30 minutes for discovery — goals, scope, and a realistic timeline. No hard sell.

  • Pick a slot — skip the email back-and-forth
  • We outline scope after the call
  • PL / EN · online · Warsaw / remote
Email to schedule discovery

Form or email — choose the path that works for you.

Response time

Typically within 24 hours

What happens after you send?

  • 1Reply within 24 business hours
  • 2Short discovery call (15–30 min) — goals, audience, integrations
  • 3Ballpark quote + proposed start timeline

Direct email

contact@codeprosite.com

Reply within 24h