What Can an Outsider Reach?
Review the agreed public-facing website and services to identify relevant exposure visible without signing in.
Website Vulnerability Assessments
Find Real Website Risk. Know What to Fix First.
Authorized external or authenticated testing turns suspected exposure into validated findings, clear priorities, and a practical remediation plan—not just a scanner export.
Published Options From $150 Scope Confirmed Before Testing
Written authorization and defined targets are required before any testing begins.
More Than a Scan
Findings Your Team Can Actually Use.
Automated tools can surface candidates—and noise. MHCS checks relevant findings, documents supporting evidence, and explains the security impact in plain language.
That gives you a basis for choosing what to fix, what can wait, and what needs a different investigation.
- Written Authorization and Defined Targets
- External or Approved Authenticated Testing
- Manual Validation of Relevant Findings
- Risk-Based Prioritization
- Clear Remediation Recommendations
Choose the Right Depth
Understand the Difference Before You Choose.
The appropriate method depends on what is in scope and what access can be safely arranged.
What Changes After Login?
With an approved test account, examine relevant functionality and access controls that a public-only review cannot see.
Did the Agreed Fixes Work?
Recheck specified findings after remediation. A retest is narrower than a new full assessment.
Published Assessment Options
Choose the Depth Your Website Needs.
Compare external testing, authenticated testing, and an option that includes a follow-up retest. We confirm fit and written authorization before committing to a package.
Vulnerability Assessment
$150 Fixed Price
Best for: You need a clear view of externally visible exposure before deciding what to fix.
Authorized external assessment · Manual validation of relevant findings
Typical Delivery: 2 days
- Authorized external assessment
- Manual validation of relevant findings
- Technical report
- Prioritized remediation recommendations
Authenticated Assessment
$300 Fixed Price
Best for: You need insight into risks behind an approved user login.
External and authenticated testing · Manual validation of relevant findings
Typical Delivery: 3 days
- External and authenticated testing
- Manual validation of relevant findings
- Technical and executive reports
- Prioritized remediation plan
Complete Assessment + Retest
$450 Fixed Price
Best for: You want a remediation roadmap and one retest after fixes are made.
Full external and authenticated assessment · Technical and executive reporting
Typical Delivery: 5 days
- Full external and authenticated assessment
- Technical and executive reporting
- Remediation roadmap
- One retest within 60 days
About the published prices: The fixed price applies to the agreed package scope. Final fit depends on the application, permitted targets, authentication needs, and testing constraints. Additional systems or work are quoted separately. Typical delivery is an estimate after scope and access are ready.
A Controlled Process
Scope First. Test Safely. Report Clearly.
Assessments are planned with the site owner so the targets, methods, and business constraints are explicit.
Describe the Site
Tell us the domain, concern, and important customer functions—without sending credentials or sensitive records.
Approve the Scope
Agree on targets, authorization, testing constraints, timing, and any account access needed.
Test and Validate
Run the permitted checks and manually review relevant findings before reporting them.
Act on the Report
Use the evidence, priorities, and recommendations to plan remediation or a scoped follow-up.
What This Includes—and Does Not
An Assessment Is a Decision Tool.
The deliverable is a clear picture of agreed website risk. It is not a promise that every vulnerability will be found or that issues will be fixed during testing.
Remediation, malware cleanup, application-code changes, and continuous monitoring require separate scope unless specifically agreed.
Already Facing an Active Issue?
Use the Urgent Triage Route.
If the site is unavailable, exposing data, or under active attack, describe the business impact before choosing a planned assessment. MHCS offers triage during U.S. business hours, not 24/7 response.
Request Business-Hours TriageQuestions Before You Start
Know What You Are Authorizing.
Is this just an automated scanner report?
No. Findings are reviewed, validated, prioritized, and translated into practical remediation recommendations.
Will you test without authorization?
No. Testing begins only after written authorization and confirmation of the permitted targets and methods.
Does the assessment include remediation?
The assessment provides evidence and recommendations. Remediation or configuration changes can be scoped separately.
What Does Authenticated Testing Add?
With an approved test account, authenticated testing can examine behavior available after login, including relevant user roles and workflows. Access is arranged separately using a least-privilege method; never send credentials through the contact form or email.
What Does the Retest Cover?
The retest checks agreed findings after you have made fixes; it is not a new full assessment or a guarantee that every issue has been removed. The published Complete Assessment option includes one retest within 60 days, subject to the agreed scope.
When Is the Published Price Confirmed?
The displayed options are fixed-price starting scopes. We confirm the application, targets, authentication needs, and testing constraints before committing to a package. Work outside the agreed scope is quoted separately.
Start With the Site and the Goal
Scope My AssessmentLet’s Scope the Right Assessment.
Tell us what you want to learn, which website is in scope, and whether authenticated testing may be useful. We’ll confirm the appropriate option before testing begins.