Do you also look inside our systems?

No. I only look at what every visitor and every mail server sees, without filling in or testing anything. A deeper check is possible separately, only with your written consent.

How many domains are covered?

One website domain and one mail domain. An extra domain is a new order.

And if I want to go further afterwards?

If you order another analysis or pack within 30 days after delivery, I deduct the full amount of this report from it; for CyberFundamentals Basic this holds within three months (once per customer).

Services

Trust Report: website and email

What does a visitor and a mail server see of your organisation? A report with evidence and ready-to-send emails for your suppliers.

For whom

SMEs, liberal professions and associations with a website and their own mail domain.

Why now

Analytics and marketing cookies need the visitor's consent first (art. 10/2 of the Belgian law of 30 July 2018). What a website loads before a choice is made, anyone can see in their browser.
Without a strict DMARC policy, someone can send mail that appears to come from your domain, for example a fake invoice to your customers.

What you get

A report (PDF) on what a visitor and a mail server see: cookies and third parties before and after a choice in the cookie banner, the privacy notice, HTTPS, security.txt, SPF, DKIM, DMARC and MX.
Two measurements at least 48 hours apart: the report only holds what I saw both times, so no one-off glitch.
A ranked list of improvements and a cookie consent plan: per tracker keep, put behind consent or remove.
Ready-to-send emails for your website builder, hosting provider and IT partner.
Evidence for every finding: a timestamp and a list of what I saw.
Three months of Trust Report Watch included: a measurement every month with a short comparison report. Then you choose whether to continue (EUR 99 per quarter); nothing continues without your consent.
During the launch period: a check that the cookie fix works and a 30-minute call about the report.

Not included

Tests beyond what an ordinary visitor does, such as filling in forms or scans: that is a technical check, only with your written consent and on quotation.
Applying the fixes: your website builder or IT partner does that; I write down what needs to happen.
Legal advice or a certificate.

Frequently asked questions

Do you also look inside our systems?: No. I only look at what every visitor and every mail server sees, without filling in or testing anything. A deeper check is possible separately, only with your written consent.
How many domains are covered?: One website domain and one mail domain. An extra domain is a new order.
And if I want to go further afterwards?: If you order another analysis or pack within 30 days after delivery, I deduct the full amount of this report from it; for CyberFundamentals Basic this holds within three months (once per customer).