We run your domain through SSL Labs’ grading tool and produce a written improvement plan — exactly which outdated protocols, cipher suites, or certificate chain issues are capping your grade, and what it would take to raise it — without necessarily making the changes ourselves as part of this.
SSL Labs grade audit & improvement plan
An SSL Labs grade audit and a written improvement plan — without necessarily making the changes ourselves.
- Full backup taken before we start
- If we can’t fix it, you get your money back
- We never ask for your own password
What we need from you
- Confirmation of the domain to be tested
- Whether you want the plan handed to you for your host to implement, or want us to implement it directly
- Access to hosting configuration, if you want us to implement rather than just plan
This or something else?
| You want an SSL Labs grade audit and a written plan for improving it | This fix covers it |
| You want the configuration actually improved, not just planned | SSL/TLS configuration grade improvement, the version where we implement the changes directly |
| Your certificate itself is showing browser warnings, not just a low grade | HTTPS / SSL certificate configuration errors, a more urgent, different fix |
| You want general security headers assessed instead of SSL/TLS grading | Security headers scan & remediation |
What we do
- Run a full SSL Labs assessment against your domain
- Identify exactly which configuration choices are capping the grade
- Write a clear, actionable improvement plan
- Note any limitations your specific hosting environment may impose
- Hand over the plan in a format your host’s support team could act on directly
What is included
- A full SSL Labs assessment
- A written, actionable improvement plan
- Notes on any hosting-imposed limitations
- A plan formatted for handing to your host’s support if needed
Not included
- Actually implementing the configuration changes — the related fix if you want that done directly
- Purchasing or renewing the certificate itself
- Guaranteeing a specific grade, since some hosting environments impose their own caps
- Ongoing monitoring as grading criteria evolve
Questions about this fix
Why would I want a plan instead of just having it fixed?
Some hosts require changes to be made through their own support team rather than directly by a third party — in that case, a clear plan you can hand them is more useful than us attempting changes we can't actually make.
Is this cheaper than having the configuration improved directly?
Generally yes, since this is diagnosis and planning rather than execution — worth comparing against the direct-implementation fix based on what you actually need.
What if my host won't let anyone but them touch TLS configuration?
That's fairly common, and exactly the situation this plan is built for — it gives your host's support team the specifics without requiring us to have that level of access.
Will this guarantee an A grade?
No — some hosting environments impose their own limits that even a perfect plan can't fully overcome, which we'd flag honestly if we find it during the assessment.
Can I upgrade to the full implementation later if I start with just the plan?
Yes, the plan itself becomes the starting point if you decide afterward that you'd rather have the changes made directly.
Related fixes
If this is the second time this year
A bad update breaking the site is a symptom of updates not being tested first. Care plans run every update on a staging clone before it reaches your live site, which is the actual fix for this happening again.
Your access, your rules
Create a separate admin account for us and delete it when we are done. For anything else, we get in touch and agree a method — never a form field on this site, never by reply to an email.
We back up first, always
Before anything is touched we take a full backup and keep it for 30 days. If a fix goes wrong, we put the site back exactly as it was.
If it is not what you bought
If the problem turns out smaller than what you ordered, we refund the difference. If it is bigger, we stop and send a quote before doing any extra work.
If we cannot fix it
You get back what we received. Diagnosis is on us — you only pay when the problem is actually solved. The payment processor takes its fee before the money reaches us, so we never hold it and it is not ours to return. That is true here as everywhere else.
If it comes back
Reply within seven days of delivery and we put it back on the bench at no cost. The fix is not finished until it holds.
What we are responsible for
If something goes wrong with a fix, our responsibility is limited to what you paid for it. We take a full backup first so mistakes can be undone, and we tell you before doing anything outside what you bought.