Vitrine
A plain-language look at your public website.
We look at your public website exactly the way a visitor’s browser does: a handful of ordinary page requests, nothing probed, nothing changed, no login, no form submitted. Fixed rules grade what came back. You receive a one-page notice in plain words that says what matters, what is in your own hands and what belongs to your platform (Wix, Squarespace, WordPress, Shopify, your agency’s build), so nobody is sent on a wild chase.
What you get, rung by rung
| Rung | What you get | Price |
|---|---|---|
| Free look | You ask, in writing. Within three business days: the notice, and the how-to your technician can follow. | Free |
| Check-up (Bilan de vitrine) | The notice, the how-to, a 30-minute call to walk through it, and a second look after your fixes, within 60 days, that says what changed. | CAD 350, once |
| Watch (Veille) | Four looks a year, a watch on your certificate’s expiry and on the contact data your pages print, each look with the difference from the last. You hear from us when something changes, and otherwise not at all. | CAD 480 a year |
Prices in Canadian dollars, taxes extra.
How it works, in five steps
- You ask, in your own words, by e-mail or text: “yes, look at my site <address>”. Nothing is observed before that.
- For a paid rung you also prove the site is yours: a small DNS record or a tiny file we give you, two minutes for your technician. The look runs only after that proof is read.
- The look: at most nine ordinary requests per host name, thirteen if you tick the linked-pages box (your login, account, cart or contact pages and your privacy page, read and never submitted), the way a browser makes them. Your logs will show a single visitor, named in your notice.
- The notice: one page, in plain words (English or French, your choice), ranked by what matters. Every item carries the standard it cites. No jargon, no scare words, no score.
- The call, the fixes, the second look. Then, if you want, the yearly watch.
The rules we work by
- We look only at sites whose owner asked and proved control. Never at anyone else’s.
- We never probe, go looking for holes or try anything a visitor’s browser would not do.
- Your notice is yours. We keep one copy for twelve months and publish nothing about your site. Who else sees it (the account manager gets your one-page summary only; an AI service helps draft it) is in our privacy note.
- No certification, no guarantee, no “your site is secure”: an honest observation of a given day, and what to do about it.
- A signed one-page mandate and a privacy note before any paid work. No cold calls, no mass e-mails.
Who it is for
A small business or professional practice anywhere in Canada whose public website brings in clients: clinics and practitioners, shops, trades, consultants, small manufacturers, associations.
Not for: government bodies, sites you do not control, or anyone who wants us to try to break in.
Ask for your free look
Two minutes, nothing to pay, no card: your e-mail, your business, your site address and your yes. Use the e-mail address your site publishes, or one on your domain; nothing is observed before your written ask.
Ask for your free lookOr write to [email protected] in your own words.
What a notice looks like: an example for a fictional clinic.
The rules behind every look are on our security page: how we review systems.