Cybersecurity

We find the flaws in your website and systems before others do

Authorised security reviews (penetration testing) for small businesses: we tell you what is wrong, how much it matters and how to fix it, in plain language.

Request your review See prices

Published prices, plus VAT. Free second review.

Services and prices

Reviews with clear prices

Pick the one that fits what you want to protect. All prices exclude VAT.

  • Security review of your website

    We look for the flaws anyone trying to get into your site could see, and explain how to close them.

    from €290+ VAT

  • Full audit of a website, shop or app

    Covers forms, login, payments and APIs: the whole journey of your users and your data.

    from €690+ VAT

  • Review of systems and office network

    Servers, Wi-Fi, computers, backups and remote access.

    from €590+ VAT

  • Email and domain review

    We check that nobody can impersonate your company: SPF, DKIM and DMARC.

    €149+ VAT

  • Continuous monitoring

    An automatic review every month and a notice if anything new appears.

    €39/month+ VAT

  • Fixing the flaws

    A fixed quote after the report, per flaw or as a package.

    from €90/h+ VAT

Every report includes what was found, the severity of each flaw, how to fix it in plain language and a free second review once it is fixed.

Risks for your business: each flaw comes with what could happen if someone exploited it (theft of customer data, fraud, site downtime, impersonation or GDPR fines) and how urgent the fix is.

Want us to fix them? We give you a fixed quote with the report, per flaw or as a package (from €90/hour or a fixed price).

With your permission

Only with the owner’s permission

We only review websites and systems of people who prove they own them or hold the owner’s authorisation, and always with a signed authorisation.

That way you are protected and the test is lawful: every step is agreed in writing before we start.

For systems run by a provider (hosting, cloud) we follow their testing rules.

How we work

From your first email to the report

  1. You write to us

    Email info@novantrek.com with what you want reviewed.

  2. We verify it is yours

    You prove ownership in one of three simple ways. Go to the verification tool

  3. We sign an authorisation

    In writing: what is tested, what is left untouched, dates and times, and who is responsible if something happens.

  4. We run the tests

    On the agreed dates, taking care not to interrupt your business.

  5. We deliver the report

    And go through the fixes together.

Ownership check

Prove the domain is yours

Before any test we check that the domain is yours. There are three ways to do it; one is enough. The tool works out your code and checks the result.

  • A. DNS TXT record

    Create a TXT record at _novantrek-verificacion.YOURDOMAIN with the code as its value.

  • B. File on your site

    Publish the code at https://YOURDOMAIN/.well-known/novantrek-verificacion.txt.

  • C. Tag on the home page

    Add <meta name="novantrek-verificacion" content="CODE"> to your home page.

Systems without a domain

For office networks, internal servers or IP addresses: an authorisation signed by the company’s representative plus proof of ownership (the provider’s contract or an invoice) and, if needed, a check in person.

Get my verification code

Our websites

The websites we build come protected as standard

Always-encrypted connection (HTTPS with HSTS): what is sent cannot be read or changed along the way.

Security headers that block code injection, clickjacking and loading of third-party content.

Hosted on the Cloudflare network, with protection against attacks that try to take a site down.

Custom-built, lightweight and free of third-party plugins: fewer doors to break in through.

Free security fixes: if a security flaw appears in a website we built, we fix it at no cost.

Frequently asked questions

Questions about security reviews

Is it legal?
Yes, with the written authorisation of the system’s owner. That is why we always ask for it and sign it before the first test.
Will my website go down during the tests?
We plan the tests so they do not affect it and agree the schedule with you. If anything worries you, we write it into the authorisation.
What are the risks of the tests?
Testing can cause some slowness or a brief service glitch. To avoid that, we agree on low-traffic times, never do anything destructive or delete data, ask you for a recent backup before starting and stop the moment you ask. It is all written into the authorisation.
What happens to my data?
Confidentiality. We only access what is necessary, the report is for you alone and everything obtained during the tests is deleted when we finish.
Who fixes the flaws you find?
Whichever you prefer. The report explains how to fix them and your team can do it. If you would rather we do it, we give you a fixed quote with the report, per flaw or as a package (from €90/hour or a fixed price). The second review after the fix is free.

Tell us what you want reviewed

Write to us with the website or systems you want reviewed. We reply with the next steps: first we verify it is yours and sign the authorisation.

Request your review

Your email program opens with a message ready to complete. You can also write directly to info@novantrek.com.