We run your site through a security headers grading tool, implement the straightforward headers that don’t require a full resource inventory, and hand you a remediation note for anything larger — a lighter first pass than building a complete, tailored Content Security Policy from scratch.
Security headers scan & remediation
A security headers grading scan with the straightforward improvements implemented directly.
- Full backup taken before we start
- If we can’t fix it, you get your money back
- We never ask for your own password
What we need from you
- Confirmation of the domain to be tested
- FTP or hosting access to implement straightforward header changes
- Whether you want a full Content Security Policy built as a follow-up
This or something else?
| You want a headers grading scan with straightforward improvements implemented directly | This fix covers it |
| You want a full, tailored Content Security Policy built around your legitimate resources | Security headers implementation – CSP, HSTS, the more involved, comprehensive version |
| You want SSL/TLS configuration grade improvement instead of headers specifically | SSL Labs grade audit & improvement plan, or the direct implementation version |
| A specific header is already set but breaking something on the site | Worth describing to us directly — likely needing a targeted exception |
What we do
- Run a security headers grading scan against your site
- Implement straightforward headers that don’t depend on a full resource inventory
- Note where a genuine Content Security Policy would meaningfully improve the grade further
- Re-scan to confirm the grade improvement from what was implemented
- Provide a quote for building a full CSP if that’s the remaining gap
What is included
- A security headers grading scan
- Straightforward headers implemented directly
- A re-scan confirming the resulting grade improvement
- A note on what a full CSP would additionally require
Not included
- Building a complete, tailored Content Security Policy — a separate, more involved fix
- SSL/TLS certificate or grading work — a separate, related fix
- Guaranteeing a perfect grade, since a genuine CSP is often needed to reach the top tier
- Ongoing adjustment as you add new external resources
Questions about this fix
Why wouldn't this include a full Content Security Policy?
A genuine CSP needs a complete inventory of every legitimate external resource your site loads, which is more involved work than implementing the headers that don't depend on that inventory.
Will this meaningfully improve my grade even without a full CSP?
Often, yes — several headers contribute to the grade independently of CSP, so a real improvement is possible from this pass alone, though reaching the very top tier usually needs the fuller version.
How do I know if I need the fuller CSP implementation too?
We'd tell you plainly after this scan whether CSP is the main remaining gap, so you can decide if that additional step is worth it for your situation.
Is there a risk these straightforward headers break something on my site?
The headers we implement directly are chosen specifically because they're low-risk and don't typically depend on your site's specific resource mix, unlike a CSP which can break things if built incorrectly.
Does this cover the same ground as an SSL Labs grade check?
No — that's a separate, related check specifically about certificate and TLS configuration, distinct from response headers.
Related fixes
If this is the second time this year
A bad update breaking the site is a symptom of updates not being tested first. Care plans run every update on a staging clone before it reaches your live site, which is the actual fix for this happening again.
Your access, your rules
Create a separate admin account for us and delete it when we are done. For anything else, we get in touch and agree a method — never a form field on this site, never by reply to an email.
We back up first, always
Before anything is touched we take a full backup and keep it for 30 days. If a fix goes wrong, we put the site back exactly as it was.
If it is not what you bought
If the problem turns out smaller than what you ordered, we refund the difference. If it is bigger, we stop and send a quote before doing any extra work.
If we cannot fix it
You get back what we received. Diagnosis is on us — you only pay when the problem is actually solved. The payment processor takes its fee before the money reaches us, so we never hold it and it is not ours to return. That is true here as everywhere else.
If it comes back
Reply within seven days of delivery and we put it back on the bench at no cost. The fix is not finished until it holds.
What we are responsible for
If something goes wrong with a fix, our responsibility is limited to what you paid for it. We take a full backup first so mistakes can be undone, and we tell you before doing anything outside what you bought.