What this security check does
Nord Leads runs an automated attack simulation against the authorized website — the same kind of probing a real attacker would use — and then a human reviews every finding to confirm it is real. You receive a report in plain business language, plus a fixed quote to fix anything that needs fixing.
Limits
- Nothing is run against your site until your written go-ahead is on record.
- We only check sites Nord Leads built, hosts or maintains.
- Only the exact domain you authorized, only within the agreed dates.
- We test the website. We do not touch other systems, your customers' devices, or accounts we were not given.
- We do not attempt to disrupt, take down, or overload your site. If anything unexpected happens, we stop and tell you.
- A check-up is not a guarantee. It covers what can be reached within the agreed scope and dates; no check can prove a site has no weaknesses.
About the report
The report describes technical weaknesses of the site. It may reference data the site handles, for example that a form collects customer names or emails, but the goal is to protect that data, not to collect or keep it. The report is yours. We keep our copy only as long as needed to deliver the work and support any fix, then remove it.