Cyber security · Audit
Website security audit
Find out where your website is exposed before someone else does. We check it the way an attacker would look first, and give you a short, prioritised list of what to fix.
Short answer: A Webmetro website security audit checks HTTPS and certificates, software and plugin versions, admin logins and two-factor authentication, backups, contact forms, security headers, exposed files and email authentication for your domain. You get a written report with each issue rated by risk and a fixed quote to fix it. The price is confirmed after a free 15-minute review of your site.
Web Metro Limited (Webmetro) · Waiyaki Way, Westlands, Nairobi · +254 727 726 279 · info@webmetro.co.ke · Updated October 2026
What we check
- HTTPS, certificate and redirect setup
- Website software, theme and plugin versions
- Admin accounts, password policy and two-factor login
- Backups: do they exist, where, and can they be restored
- Contact and payment forms: spam, validation and where data goes
- Security headers and exposed files or folders
- SPF, DKIM and DMARC for your domain
- Hosting access, file permissions and who holds the keys
What you receive
- A plain-language report with each finding rated high, medium or low
- Screenshots or evidence for each issue
- A prioritised fix list you can give to any developer
- A fixed quote if you want Webmetro to fix them
Price: confirmed after a free 15-minute review of your site, before any work starts.
We only test websites you own or are authorised to test, and we never run tests that could take your site offline.
Questions
How long does a website security audit take?
Usually two to three working days after access is agreed.
Will the audit slow down or break my site?
No. Checks are read-only and avoid anything that could take the site offline.