What this service includes
Website security and asset management
01. - 02.
Asset inventory
Domains, DNS records, certificates and email settings (MX, SPF, DKIM, DMARC) listed and checked.
Change monitoring
DNS and email settings checked every hour, so an unexpected change is caught quickly.
03. - 04.
Expiry reminders
Domain and certificate expiry tracked, with reminders well in advance.
Public file clean-up
PDFs and documents on your site checked for hidden internal paths and author data, then cleaned.
05. - 06.
Backups with restore tests
Encrypted off-site backups, with restores actually tested.
Phishing email filtering
Incoming email scored for phishing risk on the mailboxes you choose.
Who it is for
- Companies whose website and email were set up years ago by someone who has left.
- Companies that have had domain, email or phishing problems.
- Manufacturers publishing many datasheets and documents.
When it is not a fit
If you need penetration testing or a 24/7 security operations centre, this is not the right service. We don't provide either.
How we work together
01. - 02.
Inventory
Domains, DNS, certificates, email and public files reviewed.
Fix
Risky settings and leaked information cleaned up.
03. - 04.
Monitor
Hourly settings checks, expiry tracking and backups.
Report
Monthly summary of changes, alerts and backup tests.
How results are measured
Settings changes caught, expiries renewed on time, backups successfully restored in tests, and files cleaned.
Real results:KingConn (connector manufacturer)
- 119 / 248
- public PDFs found carrying hidden internal information, all cleaned
- Hourly
- checks on the domain's DNS and email settings
Pricing
The initial inventory and fixes are a project from NT$40,000; ongoing monitoring and backups from NT$12,000/month (before tax). Penetration testing is not included.
Frequently asked questions
What is the difference between a vulnerability scan and a penetration test?
A scan checks for known weaknesses automatically; a penetration test has specialists actively try to break in. We don't provide penetration testing and can refer you to a qualified firm.
What should I do if my website is hacked?
Restore from a clean backup, change all access credentials, then find how the attacker got in. Tested backups are what make the first step possible.
How much security does a small company need?
At minimum: know who controls your domain and DNS, keep certificates and domains from expiring, set up email authentication, and have backups that restore.
How often are backups taken?
The schedule is agreed per site; every backup plan includes periodic restore tests.
How is it priced?
The initial inventory and fixes are a project from NT$40,000; ongoing monitoring and backups from NT$12,000/month (before tax). Penetration testing is not included.
