Work
We started with our own website
Before putting this service front and centre, we ran our standard public check on safewebsite.com.au. It had real gaps, so we fixed them the same way we would for a client.
Before and after
| Check | Before, 2 November 2026 | Now |
|---|---|---|
| Plain HTTP | Site still loaded without encryption | Redirects to HTTPS |
| HSTS | Not set | Set |
| Security headers | Clickjacking protection only | Full set, including a Content Security Policy |
| WordPress, PHP and plugins | Public, with core and plugin updates due | Removed from the public site |
| Version details | Visible to anyone | Nothing to reveal |
| Email spoofing protection | SPF only | SPF, DKIM and DMARC |
| security.txt | Missing | Published |
What stayed
Enquiries still reach the same inbox, and business email stayed on Microsoft 365. Main service pages kept their addresses, and every retired address has a 301 redirect to its closest replacement.
You don't have to rely on this table. Check this site with independent tools.
Earlier projects
Websites we have built
Find out where your website stands
Send us your address and we will check what is publicly visible: HTTPS, security headers, email protection and visible software versions. You get a plain-English summary. It is free and we never log in, scan or touch your site.
Ask for a free website check