No stated posture at all
A general assurance with nothing behind it, and no way for a reader to check what it actually means.
SECURITY · POSTURE
A dated posture, not an undated assurance
Security posture means the current state of the measures actually in place, as opposed to a general claim made once and left to go stale. This page carries a visible date so a reader can judge freshness, rather than trusting a claim with no timestamp on it.
Last reviewed: 22 October 2026.
THE RANGE OF PRACTICE
What an undated claim looks like, and what a dated posture looks like
Described by behaviour, not by a score.
Written down, then left to age
A security page exists but carries no date, so a claim from years ago reads the same as one from this week.
Dated, and reviewed on a schedule
The same page updated as measures actually change, with a visible date so a reader can judge freshness.
AS OF THE DATE ABOVE
What is active right now
The same three measures published on the main security page, current as of this review.
Security headers configured, encryption in transit and at rest, and no third-party script on the render path, all active as of 22 October 2026. We currently sit at NIST CSF Tier 3, Repeatable, working toward Tier 4, Adaptive. No completely secure system exists, and this page will not claim otherwise regardless of the date it carries.
SIGN-IN, ENCRYPTION, INSIDE THE SYSTEM
Three more layers of enterprise cybersecurity
Post-quantum encryption, sign-in protection and monitoring inside systems. Each is a measure we build, not a promise that nothing gets through.
Encryption made for the quantum era
Post-quantum encryption is designed to hold against attacks by quantum computers, for data that has to stay private for years after it is sent.
Post-quantum encryptionA known password alone does not let anyone in
Two-factor sign-in, and sign-in bound to the owner’s device. A guard on the user’s computer watches network routes and cuts a remote session that was not allowed.
Sign-in protectionWatched from inside, while it runs
Monitoring inside the system, in real time: what runs inside it is watched while it runs, not only checked at the door.
Monitoring inside systemsSTRAIGHT ANSWERS
Questions about a dated posture
The ones that come up before anyone signs anything.
The current state of the measures actually in place right now, as opposed to a general claim made once and left to go stale. A posture page states what is true today and carries a visible date, so a reader can judge whether it is current rather than trusting a claim with no timestamp on it.
A security claim without a date could be from before or after the last dependency update, the last header change, the last audit. Dating it lets a reader judge freshness for themselves instead of taking "we are secure" on faith indefinitely.
No. This page states our own measures. The free technical audit examines a specific site, yours, and reports what is actually exposed on it. One is a standing position, the other is a specific diagnosis.
No. No completely secure system exists, and stating otherwise would be the exact claim this page exists to avoid. What it states instead is which measures are active as of the date shown.
Send us your website address. We will tell you what is exposed.
The free technical audit covers security headers, plugin and theme inventory, known vulnerabilities and whether your admin login is publicly reachable. Two days, no charge, no obligation.