I run a clear, non-destructive security audit of your website and give you a plain-English report: what's exposed, how serious it is, and how to fix it — ranked by priority. I check email spoofing (SPF, DKIM, DMARC), security headers, outdated CMS and plugins, exposed files and common web vulnerabilities. Active testing is done only on sites you own or are authorized to test, with your written OK. I can also fix the findings, not just list them. Message me to scope it.