Method
Predictable for you. Careful for your website.
Every website goes through the same fixed process and control framework. You know in advance what we test, when we make changes, and what a successful result means.
From request to follow-up
Seven verifiable steps
Information, price, and order confirmation
You will first receive clear information about the fixed audit process, the schedule, required access, and price. The investigation begins only after your written acceptance.
Fixed and secure audit preparation
Through a fixed questionnaire, we map domain, functions, data flows, and connections. We confirm access management, backup, recovery conditions, and secure test windows.
Investigation and confirmation
We combine manual assessment with appropriate tools. A scanner signal only becomes a finding after we have confirmed relevance and impact.
Report and decision
You will receive evidence, severity, business context, and remediation advice. Critical risks are reported immediately and via the agreed secure channel.
Remediation while preserving functionality
We carry out the agreed corrections within the assignment or support your developer in doing so. Work outside those agreements is discussed in advance. Changes are kept small, traceable, and reversible.
Retest and certification
We retest every correction, check important user flows, and document the result. A successful retest opens the path to certification.
Publication and completion
The certificate remains valid for one year. After publication, we close the engagement. After eleven calendar months, you receive one reminder; a new audit requires a new engagement.
Collaborate safely
Your accesses and production environment receive maximum care
- Minimal access
- Only the access necessary for the agreed task, preferably temporary and with individual accounts.
- Secure data exchange
- Preferably invite us with a temporary account. You share temporary access details in your protected customer environment at Charter Nine. Keep personal recovery codes to yourself.
- Verifiable changes
- Corrections are backed up in advance, kept small, tested, and provided with a rollback path.
- Secure test boundaries
- Every test remains within pre-approved limits and respects your business operations and third-party systems.
Clear reporting
Each conclusion must be traceable
We differentiate between observation, confirmed risk, recommendation, fixed, and retest passed. Each conclusion is based on combined and validated technical evidence from the relevant parts of your website.
After the audit, the agreed-upon repair, the successful retest, and the approval and issuance of the certificate, the assignment is completed. There are no ongoing inspections or automatic tasks. After eleven months, the administrator receives one reminder for a new audit.
The public audit framework describes the areas examined, issuance criteria and management of the current certificate status.
Information and price
Discuss the complete check of your website.
You will first receive a clear proposal with schedule, price, and access arrangements. After your acceptance, we evaluate each check from the complete fixed framework.