150+ Checks · 25 Review Areas

The Website Security Audit Checklist

A structured, no-nonsense workbook for finding and fixing the website security gaps that actually matter — SSL/TLS, security headers, authentication, WordPress and Laravel configuration, backups, monitoring, and more. Built by the team behind Red Secure Tech's penetration testing engagements.

150+Individual checks
25Review areas
4Editions to choose from

Instant download. No subscription. Use it today, re-run it every quarter.

A page from the Website Security Audit Checklist showing color-coded Pass/Fail security checks

The Website Security Audit Checklist is a structured self-review workbook covering 150+ individual security checks across 25 review areas — asset inventory, SSL/TLS, security headers, authentication, access control, CMS/platform hardening, server & database security, backups, and monitoring. It is not a penetration test; it's the tool you use before deciding whether you need one. Editions start at €29.

What's Inside

Everything you need to run a real security review

Every edition is built around the same core toolkit — a scorecard, a risk register, and an action plan — so a pile of checkmarks turns into a prioritized to-do list, not just a longer list.

Website Security Scorecard page showing a 0-100 score and rating bands

Scorecard & Rating Bands

Every check rolls up into a single 0–100 score with a clear rating — Strong, Good, Needs Improvement, High Risk, or Critical — so you can track posture over time.

Security Risk Register table with severity, owner, and deadline columns

Security Risk Register

Every failed check becomes a tracked finding — severity, evidence, recommendation, owner, and deadline — so nothing falls through the cracks.

Editable Excel workbook dashboard with an automatically calculated security score

Auto-Scoring Dashboard (Editable Edition)

The Excel/Sheets edition scores itself — mark Pass/Fail/N/A and the dashboard, per-section breakdown, and executive summary update live.

  • Asset & technology inventory, SSL/TLS, security headers
  • Authentication, administrator security, access control
  • Input validation, session & cookie security, file uploads
  • WordPress (19 checks) and Laravel (14 checks) specific hardening
  • Server, database, API, and secrets/credentials security
  • Backup verification, compromise indicators, monitoring & detection
  • Privacy, third-party services, and a non-destructive testing pass
  • 30-day prioritized improvement plan
Pricing

Choose your edition

All editions cover the same 150+ checks. The difference is depth, format, and what you do with it.

Website Security Audit Checklist — Essentials Edition cover

Essentials

The full 150+ check toolkit in a fast, 39-page read.

€29
  • 150+ checks, all 25 areas
  • Scorecard & risk register
  • Executive summary & 30-day plan
  • 39-page PDF, instant download
Buy Now — €29
Editable Excel Workbook dashboard preview

Editable Workbook

Excel / Google Sheets — fill it in and watch it score itself.

€39
  • Auto-scoring dashboard
  • Dropdowns & conditional formatting
  • Live risk register & executive summary
  • .xlsx — works in Excel & Google Sheets
Buy Now — €39
Best Value

Get all three, save €38

Essentials + Complete Workbook + Editable Workbook — every format, one price.

For Agencies & Consultants

Running this for your own clients?

White-label PDF & workbook, a client-facing report template, a multi-client tracker, and a scope-of-work template — built for reselling this as a service.

See the Agency Edition →
Compare Editions

Which edition is right for you?

Feature Essentials
€29
Complete Workbook
€59
Editable Workbook
€39
150+ checks, 25 review areas✓✓✓
FormatPDFPDF.xlsx
Pages / structure39 pages70 pages6 tabs
Scorecard✓✓✓ (auto-calculated)
Risk register✓✓✓
Executive summary✓✓✓ (live formulas)
30-day action plan✓✓✓
Full-page section dividers—✓—
Detailed security header guidanceCompactFull breakdownCompact
Glossary18 terms30 terms—
Master checklist index—✓—
Auto-scoring / dropdowns——✓
FAQ

Common questions

What is the Website Security Audit Checklist?

It's a structured checklist workbook with 150+ individual security checks across 25 review areas — including SSL/TLS, security headers, authentication, WordPress and Laravel configuration, backups, and monitoring. It's designed to help website owners, developers, and agencies find and prioritize security gaps without needing specialist tooling.

Is this the same as a penetration test?

No. The checklist is a structured self-review tool, not a penetration test. It helps you catch common configuration mistakes and missing controls, but it doesn't replace active testing by a security professional. Red Secure Tech offers professional penetration testing and vulnerability assessments separately for sites that need that level of assurance.

What's the difference between the Essentials and Complete Workbook editions?

Both cover the same 150+ checks across all 25 review areas. The Complete Workbook (70 pages) adds a full-page divider for every section, a detailed breakdown of each security header, a glossary of 30 terms, and a master checklist index. The Essentials edition (39 pages) covers the same checks and toolkit — scorecard, risk register, executive summary, 30-day plan — in a faster, more compact read.

Does the checklist work for WordPress sites?

Yes. Section 12 is dedicated to CMS security and includes a 19-item WordPress-specific checklist (core, plugin and theme updates, XML-RPC, REST API exposure, wp-config.php protection, and more) alongside a 14-item Laravel-specific checklist.

Can I use this to score multiple client websites?

The Essentials, Complete Workbook, and Editable Workbook editions are licensed for your own use. Agencies and consultants who need to run this checklist across multiple client sites, with white-label branding and a multi-client tracker, should use the Agency Edition.

What format do I receive?

The Essentials and Complete Workbook editions are delivered as PDF. The Editable Workbook is delivered as an .xlsx file compatible with Excel and Google Sheets, with dropdowns, conditional formatting, and an auto-calculating dashboard.

Know where your website actually stands.

150+ checks. 25 review areas. One repeatable process. Start today.

See Pricing & Buy

© 2016 – 2026 Red Secure Tech Ltd. Registered in England and Wales — Company No: 15581067