Hosting and pages.

What we check

• Which provider is actually serving the site, and any change to it
• Third-party scripts embedded in your pages, and when each first appeared
• Changes to the pages you nominate, usually pricing, terms and service descriptions
• Whether the site is reachable over a secure connection and redirects correctly

Scripts are the part people underestimate

A typical business site loads between five and fifteen third-party scripts: analytics, chat widgets, booking tools, tracking pixels, embedded fonts. Most were added by different people over several years, and a fair number belong to services no longer in use.

The record notes when each first appeared. During a security review or a breach disclosure elsewhere, the question is whether you were running something on a particular date, and that is otherwise unanswerable.

Page snapshots

On plans with retention, we keep a copy of what nominated pages said on each check. When a customer says they were promised something in March, or a regulator asks what was published at the time, the copy exists. Reconstructing that after the fact is usually impossible.

What we will not send you

We do not report every trivial change, and we do not tell you a page looks suspicious. Alerts that need interpreting turn into work for you, and we would rather send fewer things you can act on than more things you have to judge.