Website security.Check and fix.Keeping up after launch.
Security isn't a feature we bolt on. It's the floor we build everything on.
For business owners
What secure software gets you.
GDPR basics in place
Customer data properly protected and your agreements on paper. So you are prepared for questions about data breaches, audits and processing agreements.
Trust that counts
Customers and partners see their data is in good hands with you. That saves discussions during procurement checks and tenders.
No expensive surprises
A hack or leak quickly costs a small business days of downtime, recovery costs and customer trust. Building it right up front costs less than repairing it later.
What that looks like in practice.
Every product we deliver goes live with a fixed security check and strict protection settings. We check existing systems just as thoroughly.
- Strict browser security (CSP)
- Traffic encrypted via HTTPS
- Third-party software auto-checked
- Every change scanned before launch
- Periodic security review
- Incident playbook ready
Always
Security check with every delivery
Strict
Strict security rules, by default
Fast
Servers close to your visitors
WCAG AA
Our accessibility standard
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; …These are this site's actual security headers, fetched live. Not a mockup.
Multiple locks on the door
Firewall, strict browser rules, encryption and separated customer environments. That way security does not depend on one single measure.
Never trust blindly
Every request has to prove itself first, even inside our own system. Access is short-lived and controlled, and everything is recorded.
Checks before launch
Every change is automatically checked for known bugs and leaks before it goes live. Third-party software we use is continuously checked too.
Go live carefully
New features start with a small group first and can be switched off with one click. We build the recovery path first.
Frequent questions
Security, plainly explained.
- We check everything an attacker would try: the login, payments, forms, the software you rely on and how data is stored. You get two reports: one in plain language for you, and a technical to-do list for whoever fixes it.
Start a project with Sonora
Tell us about your project. We reply within one business day.