Security for electricians, joiners, plumbers, and small shops
You've got a booking or quote website, maybe you take deposits online, and definitely no time to think about security software. Here's what an automated scan checks in the background, and what's worth a quick manual look.
// why this matters for local trades
Most local trades businesses don't run anything more complex than a website with a quote form and an inbox full of job details and invoices — which is exactly why they're a soft target for scams that don't need a technical exploit, just a spoofed email or a hijacked listing. The automated scan is built for a business with no IT department: run it, get a plain-English report, fix what matters.
Quote requests, contact forms, and deposits
AutomatedIf customers submit a contact form, request a quote, or pay a deposit through your site, the scan checks that page enforces HTTPS properly, has no mixed-content issues, and carries the cookie and header protections that keep that form submission from being tampered with in transit.
Invoice fraud and email impersonation
Automated"Please pay this invoice to our new account details" scams specifically target trades businesses, because customers expect an invoice email from you mid-job. SPF, DKIM, and DMARC on your domain are what stop someone spoofing your address to send one — checked on every scan.
An old website nobody's touched in years
AutomatedA lot of trades sites were built once by a local web designer and haven't been opened since. The scan fingerprints your CMS and plugin versions (WordPress, Wix, Squarespace, whatever it is) and flags outdated software plus any leftover config or backup files a forgotten migration left exposed.
Google Business Profile and listing accounts
Manual / advisoryYour Google Business Profile, Facebook page, and directory listings live outside your own website, so a site scan can't check them — but a shared or reused password on one of those accounts is a real, common way small trades businesses get their listing hijacked. This is advisory guidance, not an automated finding.
No dedicated IT person
Manual / advisoryYou're running the business, not a helpdesk. That's exactly what the automated scan is for — an outside check you don't have to remember to do — with our Local Business Package available if you'd rather someone just tell you what to fix and set up email authentication for you.
Every “Automated” item above runs as part of the standard Security Score scan — see the full technical checklist. “Manual / advisory” items are covered as part of our Local Business Package, which is built specifically for businesses without a dedicated IT resource.
// ready?
Find out where your site stands, for free
Free automated scan, one-page report in 24 hours, no commitment. Ongoing monitoring from £20/month, or a one-off Small Website Audit from £300 if you'd rather it was done once and done properly.