One domain · Paid up front · Results within 24 hours
24-hour website security check
A point-in-time look at one website you own or are authorized to test. We check the public surface, write the findings, and a person at L&M reviews the report before it is sent to you.
This is not a penetration test, not a complete vulnerability assessment, and not a guarantee that the site is secure. Missed issues are possible.
Both cover one exact domain. You pay before any check starts. Results follow within 24 hours of payment and a complete intake. If you continue with a full in-person assessment, the cost of this 24-hour check is credited toward that assessment.
Public check
$349
One domain. Public pages only. No login.
TLS, security headers, exposed files, known CMS or plugin issues, obvious misconfigurations
Findings and evidence only. No exploit attempts.
Written report after review, within 24 hours of payment and a complete intake
Authenticated check
$599
Same public check, plus one test account you create and provide.
We do not create accounts and we do not guess passwords
Use a low-privilege test user. Do not send a real customer or admin password.
Credentials are collected after payment, used only for this order, then deleted after the report
In scope
The one domain named on the order.
Public pages on that domain.
Authenticated tier: only the test account you provide.
Findings and evidence. No data extraction, no persistence, no scanning of other hosts.
Out of scope
Payment-card environments, internal networks, and other domains.
Admin takeover, social engineering, and exploit attempts.
A certificate, an audit, or a statement that the site is secure.
Those need a separate written engagement.
Authorize and pay
No check starts without payment and a signed authorization for that exact domain. You will go to Stripe checkout. The report is queued after payment and is sent only after review. If you continue with a full in-person assessment, the amount you pay here is credited toward that assessment.