01
LRI Connect Services
Website Security and Resilience Review
For a board that has a website it did not build, cannot fully account for, and would like a sober read on.
A non-destructive review of what your website exposes, what protects it, and what happens to it when something goes wrong.
What it costs
Quoted, and here is why
Quoted
The fee is drafted and not approved. It also tracks the size and shape of the site, and a six-page brochure and a portal with resident logins take different amounts of looking.
What is fixed anyway
- Non-destructive throughout. Nothing is altered, taken down, or stress tested
- The scope and the fee are agreed in writing before anyone starts
- Every finding carries evidence and a remediation, and findings are ranked by exposure
- A retest at sixty days is included, with a second report on what was closed
- The report is yours, including the parts that are inconvenient for whoever built the site
What you get
Every line here is a thing that exists, not an adjective
02
A read on the controls actually in place: transport, access, credentials, third-party scripts
03
A privacy read on what the site collects and where it sends it
04
A resilience read on backups, restoration and who can bring it back
05
A retest sixty days later, included, so the findings are closed rather than filed
What happens next
Three steps, and the first one is yours
You send the website address and say who maintains it. We reply within one business day with a scope and a fee.
Before you ask for a call
When this is the wrong answer
This is a review, not a penetration test. We do not attack your site, and if you need an adversarial test that is a different engagement with a different kind of firm.
Where our responsibility ends
LRI Connect provides software and operational services. Legal conclusions, privilege decisions, required disclosures, and final compliance determinations remain with the client and its qualified counsel.
Also worth reading
What sits next to this
-
LRI Connect Services
Document Readiness Audit
For a board that does not know what its own website publishes and has decided it should find out before somebody else does.
See it in full → -
LRI Connect Services
Managed Document Website
For a board that needs records published properly and does not want the publishing to be a standing agenda item.
See it in full → -
LRI Connect Services
Continuous Website Assurance
For a board that has already had the review done and does not want to be back in the same place in eighteen months.
See it in full →
Send us two facts and we will send you a figure
You send the website address and say who maintains it. We reply within one business day with a scope and a fee.
LRI Connect provides software and operational services. Legal conclusions, privilege decisions, required disclosures, and final compliance determinations remain with the client and its qualified counsel.