We were hacked and do not know how deep it went.
Security, Privacy & Accessibility
Check first. Sleep better afterwards.
Three topics companies postpone until a lawyer writes or the site starts serving other people's adverts: security, data protection and accessibility. All three are fixable in reasonable time — and far cheaper before than after.
Sounds familiar?
Sounds familiar?
Our contact form is drowning in spam.
We do not know whether the European Accessibility Act applies to us.
Scope
Scope
Security review: authentication, forms, uploads, server configuration, dependencies
Hardening: security headers, abuse protection, permissions, backups
Data protection: documented data flows, consent under German TDDDG, processing agreements
Accessibility to WCAG 2.2 AA and EN 301 549 — automated and manual
Prioritised report: what is legally required, what is optional
Remediation with a verification pass
Accessibility statement and reporting channel
Incident support: contain, clean, secure, document
What changes
What changes
A written report you can show clients, partners and authorities.
Accessibility helps everyone on a small screen in bright sunlight.
Backups that were actually restored once, and a plan somebody knows.
How it runs
How it runs
Test
Automated and manual — automation alone finds roughly a third.
Prioritise
By risk and effort, not by tool output order.
Fix
Implementation with before-and-after evidence.
Document
Statement, reporting channel, responsibilities.
Price range
security review from €490 · accessibility from €590Timeline
review days · remediation on findingsGood fit for
Shops and booking systemsCompanies holding customer dataSuppliers to public bodies
What clients ask here
What clients ask here
Does the European Accessibility Act apply to us?+
If you sell or take bookings online, assume yes unless you fall under the micro-enterprise exemption. We check and confirm in writing.
Is this legal advice?+
No. We provide technical assessment and implementation. Binding review belongs with a lawyer, and we refer you to one.
We are being attacked right now.+
Call. Order of operations: lock access, assess scope, clean, rotate credentials, harden, document. Causes come afterwards.
How often should this be checked?+
Once a year and after every major change. Automated monitoring in between.
Security, Privacy & Accessibility
Reply within 24 hours on working days. No sales call, no data passed on.