Frequently Asked Questions

WebInspect.pro performs a comprehensive inspection of your website and publicly accessible infrastructure. We analyse your domain configuration, SSL/TLS security, DNS records, email authentication, HTTP security headers, website behaviour, and common infrastructure exposures.

Unlike vulnerability scanners that produce thousands of technical findings, our reports focus on practical improvements that website owners can actually implement.

No. WebInspect.pro is a website security and configuration inspection service. It checks security best practices, identifies configuration weaknesses, and highlights opportunities to improve your security posture — without performing intrusive testing or exploiting vulnerabilities.

No. Our inspections are non-intrusive and only examine publicly available information and standard web responses. No changes are made to your website.

Yes. You should only inspect websites you own or are authorised to assess.

The free inspection includes the complete raw inspection output:

• SSL/TLS certificate information
• DNS records
• SPF, DKIM and DMARC status
• Security headers
• Redirect behaviour
• Cookie security flags
• security.txt
• Common port scan
• CMS detection
• Server fingerprinting
• Performance information
• Infrastructure overview

The free report is ideal if you already understand the technical results.

No. The free report shows the inspection results only. Paid products add explanations, prioritised recommendations, implementation guidance, and expert review.

The Technical Report includes everything from the free inspection, enhanced with:

• Prioritised findings
• Risk levels
• Technical explanations
• Security recommendations
• Industry best practices
• References to recognised standards where appropriate
• Overall security summary

The report explains what should be improved, why it matters, and the technical approach recommended to address each finding.

Primarily, yes. The Technical Report is best suited for developers, system administrators, technical teams, and users who are comfortable making configuration changes themselves. The recommendations explain what should be changed and why, but they assume some technical familiarity with web servers, DNS, or hosting platforms.

Not in detail. It explains what the issue is, why it matters, and what should be changed. If you would like copy-and-paste implementation examples, the Guided Remediation report is the better option.

Guided Remediation includes everything in the Technical Report, rewritten for website owners rather than developers. Instead of simply explaining what should be fixed, it provides step-by-step guidance showing exactly how to implement each recommendation using clear, non-technical language wherever possible.

Depending on your environment, the report may include:

• Apache, Nginx, and IIS configuration examples
• DNS record examples
• Email security configuration guidance (SPF, DKIM, DMARC, BIMI)
• HTTP security header examples
• HTTPS and HSTS configuration
• Content Security Policy examples

The recommendations are tailored to the technologies detected during the inspection whenever possible.

No. Guided Remediation is specifically written for website owners and small business operators who may not have a technical background. Where possible, the report explains which service to log into, what settings need changing, and provides copy-and-paste examples that can be followed by you or shared with your hosting provider or web developer.

Where possible, yes. If your DNS provider, hosting platform, email provider or CDN can be identified, the report includes provider-specific guidance.

Where appropriate, yes — for example SPF, DMARC, BIMI, DNSSEC guidance, and DKIM instructions. Please note that some providers generate DKIM records automatically, so these values cannot always be provided directly.

Unlike the automated reports, the Expert Review is performed by a security professional. Your inspection results are manually reviewed to identify additional improvement opportunities and verify the automated findings.

• Manual review of your inspection results
• Validation of the automated findings
• Additional recommendations
• Prioritised action plan
• Practical guidance tailored to your website
• One follow-up question by email

Expert Reviews are normally delivered within 2–3 business days.

No. Unless separately agreed, the review is based entirely on the inspection results and publicly available information. No access to your hosting account, website, or control panel is required.

Yes. Reports are only accessible using their unique report link and are never shared with third parties.

No. We never ask for passwords or hosting credentials as part of the inspection process.

No. No automated inspection can guarantee complete security. Our reports help identify configuration issues and security improvements, but they should be considered part of an ongoing security programme rather than a guarantee against future attacks.

No. WebInspect.pro performs security inspections and configuration analysis. It does not attempt to exploit vulnerabilities or perform intrusive penetration testing.

• Free Inspection — Ideal if you only want the raw inspection results.
• Technical Report — Best if you want to understand the findings and receive prioritised recommendations.
• Guided Remediation — Ideal if you want detailed implementation guidance and copy-and-paste configuration examples.
• Expert Review — Recommended if you'd like a security professional to personally review your results and provide tailored recommendations.

Choose the Technical Report if you or your team are comfortable interpreting technical recommendations and making the required changes yourselves.

Choose Guided Remediation if you would prefer clear, step-by-step instructions written for website owners. It explains exactly where to make changes and includes practical examples that can be followed or forwarded to your hosting provider or web developer.

Yes. The report is designed to be practical and actionable. Many customers simply forward the report to their hosting provider, web developer, or IT support team, who can implement the recommended changes using the included guidance.

Both paid reports work regardless of the platform your website uses. The Technical Report explains the findings from a technical perspective. Guided Remediation goes a step further by tailoring recommendations to the technologies detected during the inspection whenever possible.

That's exactly what our paid reports are designed to solve. The Technical Report explains each finding in plain English while still providing the technical context needed by developers and IT teams. If you would rather avoid technical terminology wherever possible, Guided Remediation is the better choice because it focuses on practical actions instead of technical detail.

Yes. You can start with the Technical Report and later upgrade to Guided Remediation or Expert Review if you need additional assistance.