Frequently Asked Questions

WebInspect.pro performs a comprehensive inspection of your website and publicly accessible infrastructure. We analyse your domain configuration, SSL/TLS security, DNS records, email authentication, HTTP security headers, website behaviour, and common infrastructure exposures.

Unlike vulnerability scanners that produce thousands of technical findings, our reports focus on practical improvements that website owners can actually implement.

No. WebInspect.pro is a website security and configuration inspection service. It checks security best practices, identifies configuration weaknesses, and highlights opportunities to improve your security posture — without performing intrusive testing or exploiting vulnerabilities.

No. Our inspections are non-intrusive and only examine publicly available information and standard web responses. No changes are made to your website.

Yes. You should only inspect websites you own or are authorised to assess.

The free inspection includes the complete raw inspection output:

• SSL/TLS certificate information
• DNS records
• SPF, DKIM and DMARC status
• Security headers
• Redirect behaviour
• Cookie security flags
• security.txt
• Common port scan
• CMS detection
• Server fingerprinting
• Performance information
• Infrastructure overview

The free report is ideal if you already understand the technical results.

No. The free report shows the inspection results only. Paid products add explanations, prioritised recommendations, implementation guidance, and expert review.

The Technical Report includes everything from the free inspection, enhanced with:

• Prioritised findings
• Risk levels
• Technical explanations
• Security recommendations
• Industry best practices
• References to recognised standards where appropriate
• Overall security summary

The report explains what should be improved, why it matters, and the technical approach recommended to address each finding.

Primarily, yes. The Technical Report is best suited for developers, system administrators, technical teams, and users who are comfortable making configuration changes themselves. The recommendations explain what should be changed and why, but they assume some technical familiarity with web servers, DNS, or hosting platforms.

Not in detail. It explains what the issue is, why it matters, and what should be changed. If you would like copy-and-paste implementation examples, the Guided Remediation report is the better option.

Guided Remediation includes everything in the Technical Report, rewritten for website owners rather than developers. Instead of simply explaining what should be fixed, it provides step-by-step guidance showing exactly how to implement each recommendation using clear, non-technical language wherever possible.

Depending on your environment, the report may include:

• Apache, Nginx, and IIS configuration examples
• DNS record examples
• Email security configuration guidance (SPF, DKIM, DMARC, BIMI)
• HTTP security header examples
• HTTPS and HSTS configuration
• Content Security Policy examples

The recommendations are tailored to the technologies detected during the inspection whenever possible.

No. Guided Remediation is specifically written for website owners and small business operators who may not have a technical background. Where possible, the report explains which service to log into, what settings need changing, and provides copy-and-paste examples that can be followed by you or shared with your hosting provider or web developer.

Where possible, yes. If your DNS provider, hosting platform, email provider or CDN can be identified, the report includes provider-specific guidance.

Where appropriate, yes — for example SPF, DMARC, BIMI, DNSSEC guidance, and DKIM instructions. Please note that some providers generate DKIM records automatically, so these values cannot always be provided directly.

Unlike the automated reports, the Expert Review is performed by a security professional. Your inspection results are manually reviewed to identify additional improvement opportunities and verify the automated findings.

• Manual review of your inspection results
• Validation of the automated findings
• Additional recommendations
• Prioritised action plan
• Practical guidance tailored to your website
• One follow-up question by email

Expert Reviews are normally delivered within 2–3 business days.

No. Unless separately agreed, the review is based entirely on the inspection results and publicly available information. No access to your hosting account, website, or control panel is required.

Yes. Reports are only accessible using their unique report link and are never shared with third parties.

No. We never ask for passwords or hosting credentials as part of the inspection process.

No. No automated inspection can guarantee complete security. Our reports help identify configuration issues and security improvements, but they should be considered part of an ongoing security programme rather than a guarantee against future attacks.

No. WebInspect.pro performs security inspections and configuration analysis. It does not attempt to exploit vulnerabilities or perform intrusive penetration testing.

• Free Inspection — Ideal if you only want the raw inspection results.
• Technical Report — Best if you want to understand the findings and receive prioritised recommendations.
• Guided Remediation — Ideal if you want detailed implementation guidance and copy-and-paste configuration examples.
• Expert Review — Recommended if you'd like a security professional to personally review your results and provide tailored recommendations.

Choose the Technical Report if you or your team are comfortable interpreting technical recommendations and making the required changes yourselves.

Choose Guided Remediation if you would prefer clear, step-by-step instructions written for website owners. It explains exactly where to make changes and includes practical examples that can be followed or forwarded to your hosting provider or web developer.

Yes. The report is designed to be practical and actionable. Many customers simply forward the report to their hosting provider, web developer, or IT support team, who can implement the recommended changes using the included guidance.

Both paid reports work regardless of the platform your website uses. The Technical Report explains the findings from a technical perspective. Guided Remediation goes a step further by tailoring recommendations to the technologies detected during the inspection whenever possible.

That's exactly what our paid reports are designed to solve. The Technical Report explains each finding in plain English while still providing the technical context needed by developers and IT teams. If you would rather avoid technical terminology wherever possible, Guided Remediation is the better choice because it focuses on practical actions instead of technical detail.

Yes. You can start with the Technical Report and later upgrade to Guided Remediation or Expert Review if you need additional assistance.

The WebInspect B2B Partner Program connects qualified IT and cybersecurity professionals with customers who purchase an Expert Review through WebInspect.pro.

Partners provide the professional review using WebInspect's standardised methodology and report format, while WebInspect manages the inspection platform, customer ordering process, and assignment of eligible Expert Reviews.

The Partner Program is intended for experienced professionals and businesses working in areas such as:

• Cybersecurity
• IT consulting
• Web security
• Network and systems administration
• Managed IT services
• Information security and compliance

Applications are reviewed before approval. WebInspect may request additional information about your professional background, experience, company, website, or relevant qualifications.

Yes. There is no registration or membership fee to apply for or participate in the WebInspect Partner Program.

No. Submitting a registration is an application to join the program. WebInspect reviews Partner applications before approving them. Only approved Partners are eligible to receive Expert Review assignments.

When a customer purchases an Expert Review, WebInspect determines whether an approved Partner is available and suitable for the assignment. Assignments may take into consideration factors such as:

• Customer location
• Partner country or region
• Partner availability
• Relevant experience
• Existing assignment workload

Where multiple suitable Partners are available, WebInspect aims to distribute assignments fairly.

Where this option is available during checkout, customers may indicate a preference for a local or regional Partner. WebInspect will attempt to accommodate that preference where a suitable approved Partner is available.

If no suitable Partner is available, the Expert Review may be completed directly by a WebInspect professional or assigned to another qualified Partner. The scope and methodology of the Expert Review remain the same regardless of who performs the review.

No. Partners may accept or decline assignments based on their availability. Declining an occasional assignment does not automatically affect your Partner status. However, WebInspect may review Partner availability if assignments are repeatedly left unanswered or declined.

Partners should respond to assignments within the timeframe stated in the assignment notification. If an assignment is not accepted within the specified period, WebInspect may reassign it to another Partner to avoid delaying the customer.

The Partner reviews the customer's WebInspect inspection results using the standardised Expert Review methodology. The purpose of the review is to:

• Validate automated findings where appropriate
• Identify findings that may require manual confirmation
• Review the significance of identified security and configuration issues
• Prioritise recommendations
• Add professional observations and context
• Prepare the final Expert Review report

No. A WebInspect Expert Review is not a penetration test, vulnerability exploitation service, PCI ASV scan, certification, or authenticated security assessment. Partners should not attempt to exploit vulnerabilities or perform intrusive testing against customer systems.

Partners receive 80% of the Expert Review fee for each successfully completed and accepted assignment. There are no joining fees, membership fees, or lead fees. WebInspect handles customer acquisition, payment processing, the initial automated inspection, and delivery of the standardised Expert Review framework.

Full payout terms and payment arrangements are provided during Partner onboarding.

Partner earnings are paid using supported electronic payment methods such as PayPal or Revolut. Available payout methods and any applicable payout requirements will be confirmed during Partner onboarding. Partners are responsible for providing accurate payout information and for any tax or reporting obligations applicable to them.

Yes. One of the benefits of becoming a WebInspect Expert Review Partner is the opportunity to establish new professional relationships. If a customer requires additional assistance — such as implementing recommendations, further security assessment, remediation, consulting, or other IT and cybersecurity services — they may choose to engage the Partner directly.

Any additional engagement is separate from the original WebInspect Expert Review and should be agreed directly between the Partner and the customer. There is no guarantee that a customer will require or purchase additional services.

Yes. Partners who are temporarily unavailable should indicate their availability or contact WebInspect so that new assignments are not sent during that period. This is useful during holidays, periods of high workload, or other temporary absences.

No. Joining the Partner Program does not guarantee any minimum number, frequency, or value of assignments. Assignment volume depends on customer demand, location, Partner availability, and other operational factors.

Yes. WebInspect may approve multiple Partners within the same country or region. Where several suitable Partners are available, WebInspect aims to distribute eligible assignments fairly while considering availability, workload, customer requirements, and service quality.

Customers purchasing an Expert Review through WebInspect remain WebInspect customers for that transaction. Participation in the Partner Program does not transfer ownership of WebInspect customer accounts, inspection data, or orders to the Partner.

Partners must treat customer and inspection information as confidential and use it only for completing the assigned Expert Review.

Complete the WebInspect Partner application form and provide the requested professional or business information. WebInspect will review your application and contact you if additional information is required. Once approved, you will become eligible to receive Expert Review assignments through the Partner Program.