06 · Assessment

Four minutes, one honest picture

Answer what you know. "Not sure" counts as a risk until it is checked. Your answers stay on this page unless you ask for the free scan at the end.

Your business

Do you sell to consumers online?

A shop, bookings, subscriptions or any paid service ordered on your site.

Do you have 10 or more staff, or over €2M (about £1.7M) turnover?

Smaller businesses are exempt from the EU accessibility law.

Do customers type card details on your own pages?

Not when they are sent on to PayPal or to your payment provider's own page.

Email in your name

Do you send newsletters, quotes or invoices from your own domain?

For example from [email protected] through a newsletter or invoicing tool.

What is your DMARC setting, the one that tells mail servers what to do with fake email from your address?

If the word means nothing to you, choose "I do not know". Our free email check shows it.

Has a customer or supplier ever received an odd email that looked like yours?

Has anyone checked your email settings (SPF, DKIM and DMARC) in the last 12 months?

Tracking before consent

Does your site use Google Analytics, a Meta pixel or other advertising tools that track visitors?

If an agency set up your ads, the answer is probably yes.

What does your cookie banner offer?

Has anyone checked that no tracking starts before the visitor answers the cookie banner?

Customers with disabilities

Does your site publish an accessibility statement, a page saying how accessible it is and how to report a problem?

Has someone tried your checkout using only a keyboard?

Use the Tab key to move through product, basket and payment, without a mouse.

When was your site last rebuilt?

Payment and site security

Does your site's security certificate renew automatically?

The certificate is what puts the padlock in the address bar.

Are your website software, its theme and its add-ons (plugins) updated at least once a month?

If you take cards on your own pages, is every script (each piece of code) on the payment page watched for changes?

Required by the card companies' security rules since March 2025.

Your exposure

0 of 16 answered

0 / 100

Answer a few questions to see your picture.

Email in your namenot answered

Tracking before consentnot answered

Customers with disabilitiesnot answered

Payment and site securitynot answered

Your next 30 days

Answer the questions to build your list.

We would suggest

Answer a few more questions

Or let the free scan look for you.

Free exposure scan

Confirm it with a real scan

We read only what any visitor can see, and your domain's public settings: no login, no testing of your systems. You get a private report by email with screenshots, a score for each of the four exposures, and fixed prices.