Is this a penetration test?

No. It is a practical public-facing website safety and growth check. It does not include login bypass attempts, exploitation, password testing, or intrusive scanning.

What does the check look at?

It looks at visible website trust signals, HTTPS, obvious exposed public files, contact paths, basic email/domain trust signals where visible, ownership questions, and next-step growth opportunities.

Can it fix the issues?

Some simple website copy, contact path, page structure, or safety wording issues can be fixed after approval. DNS, email, hosting, forms, access, or publishing changes need owner approval first.

WEBSITE SAFETY & GROWTH CHECK FOR REGIONAL BUSINESSES

Website Safety & Growth Check for Regional Businesses

A small business website has two jobs: help the right customer trust the business, and make it easy to take the next step safely.

The Website Safety & Growth Check is a plain-English review for regional businesses that want to improve the basics before spending money on a bigger rebuild, ad campaign, or complicated system.

It is not fear-based cyber work. It is a practical check of the things customers, search engines, and business owners notice first.

What this check covers

The review looks at public-facing basics such as:

whether the site loads cleanly over HTTPS
whether obvious private files appear to be exposed publicly
whether the homepage explains what the business does and where it works
whether phone, email, quote, and contact paths are clear on mobile
whether enquiry paths warn customers not to send passwords, card details, bank details, login links, or private customer lists
whether service pages, locations, and calls to action match what customers search for
whether practical digital safety basics are visible enough to build trust
whether there are obvious next steps for Google visibility, reviews, and follow-up

Where useful, the check can also note visible email/domain trust basics such as SPF, DKIM indicators, and DMARC. Those records can reduce spoofing and improve confidence, but changes are never made without approval from the domain owner.

What this check does not cover

This is not a full cyber assessment.

It does not include:

password guessing or login testing
attempts to bypass admin areas
intrusive vulnerability scanning
file upload testing
denial-of-service testing
payment, legal, privacy, or compliance advice
device security or staff cyber training
guaranteed protection from scams or hacking

If a business has sensitive customer data, ecommerce payments, suspected compromise, custom web apps, or regulated compliance needs, the right move is to involve a qualified cyber specialist.

Growth problems the check can uncover

Safety and growth often overlap. A site that looks unclear or risky also converts poorly.

Common issues include:

the business has good services, but the homepage does not say them clearly
service areas are buried or missing
calls to action are too vague
phone links do not work properly on mobile
forms ask for too much sensitive information
customers are not told what to include in an enquiry
old pages or blog posts do not link toward a review, quote, or contact path
the site does not give Google, Maps, or assistants enough clean business facts to understand it

The output is a short priority list: what to fix first, what can wait, and what needs owner access or approval.

Best first step

If you are not sure where the website is leaking trust or enquiries, start with the Free Local Growth Review. It looks at the bigger customer journey: Google, reviews, website, enquiry path, quote follow-up, and practical digital safety.

If you already know the website needs a safety-and-growth pass, contact Bush Digital Guides and include the public website link, business name, and main service area.