Website assessment · early access

Understand where your website may be exposed.

A public website can expose risks that are difficult to judge from how it looks.

Review observed security and trust findings before deciding what needs attention.

What the assessment covers

The Forge’s Marketing workspace includes Site Health and Web Presence Audits. The Site Health register describes passive, GET-only security and trust checks, including headers, TLS certificates, cookie flags, email authentication, mixed content and exposed artifacts. Extra benign requests require proof of hostname control. Confirm early-access scope and provider before authorizing assessment.

What you receive

The existing Website Health Report presents security findings alongside SEO observations. Read the evidence, impact and suggested response rather than relying on a grade alone. A high grade can still include findings needing attention. Confirm report access, severity handling and authorized recipients before proceeding.

What needs your approval

Only request assessment of a website you own or are authorized to assess. Confirm ownership checks, target hostname and permitted scope. The example performs no assessment and requests no credentials.

Turn recommendations into agreed work

Review each finding with the website maintainer, agree priority and approve repairs separately. Automatic repairs and a managed security service are not confirmed.

Monitoring and reassessment

The inspected Site Health implementation includes an opt-in weekly check and audit history. Confirm account access, scheduling and provider delivery before relying on repeat assessments. Continuous monitoring and verification that repairs succeeded are separate capabilities; they are not implied by a scheduled audit.

Measure what actually happened

Track supported findings, agreed repairs and any later authorized observations. A cleared finding does not prove complete protection, and a completed review is not compliance certification.

Report handling and confidentiality

Reports can reveal weaknesses. Confirm restricted recipients, delivery, storage and retention with the service owner before assessment. Do not send secrets or sensitive findings through the Fit Review form.

Limits to keep in mind

This is not penetration testing, a complete vulnerability assessment, compliance certification or a guarantee of protection. It does not automatically change your website.