Consent-first · Non-invasive · In person
Website safety reviews for Clarkson clinics.
I check the public-facing parts of your website and email records, explain what matters in plain English, and quote the small fixes I can safely make.
A 10-minute conversation at your counter costs nothing.
Why clinics specifically
Two scams that target clinics like yours
Fake appointment reminders
Scammers send booking or reminder emails that look like they came from your clinic. The DNS records that block this (SPF, DKIM, DMARC) are missing or half-configured at most small clinics. This is fixable in one session.
Old websites, quiet break-ins
Outdated plugins and exposed files on a clinic website can quietly redirect clients to fake payment pages. A non-invasive review of the public surface catches the common versions of this — before the confusing phone call.
Scope
What I check — and what I never touch
What I check (public surface only)
- HTTPS and certificate setup
- Security headers and redirects
- Publicly reachable files and directory listings
- Public CMS, theme, and plugin version signals
- Public DNS and email authentication (SPF, DKIM, DMARC)
- Public login and booking pages — without logging in
- Forms on public pages: what they ask for and where it goes
What I don't do
- No logins, passwords, or staff accounts
- No patient, client, or payment data — ever
- No exploiting, fuzzing, or denial-of-service tests
- No changes to your site without your written OK
- If an agency manages your site: I work with them, or stay public-info only
Full scope statement: Privacy & scope.
Process
How it works
- 10-minute conversationAt your counter, by phone, or by video. Free, no commitment.
- Written OKYou confirm the check by text or email. I send the exact scope: your domain, the date window, what I will and won't touch.
- The checkI run the non-invasive review — public website surface plus DNS and email records.
- Plain-English reportA short report plus a walkthrough call. You decide if you want any fixes. Review fee is credited toward a fix booked within 30 days.
Pricing
Straightforward prices, quoted before any work
| Service | Price | What you get |
|---|---|---|
| Email & DNS Safety Check No website access at all — DNS records only. |
$99 | Check of SPF, DKIM, DMARC, MX, DNSSEC and CAA. One-page report and a 20-minute call. Most clinics have at least one gap here. |
| Website Safety Review Intro price for the first five local businesses. |
$199 intro | The non-invasive website check plus the email/DNS layer. One-page owner report and a 20-minute walkthrough. |
| Safety + Local Visibility Review Add-on for clinics that also want to be found. |
$299 | Everything in the $199 review, plus technical SEO basics, Google Business Profile/NAP consistency, and AI-search readiness (how your clinic shows up when someone asks ChatGPT or Google for “vet near me”). |
| Quick Fix Pack DNS/email-only fixes available separately. |
From $450 | Security headers, HTTPS redirect, exposed files, directory listing, CMS/plugin updates, backup check, and a re-check when done. DNS/email-only fix: $150–$299. |
| Ongoing check Optional, after the first review. |
$99/mo | Monthly non-invasive check of site and DNS records, with a short report. Cancel anytime. |
About
Who you're actually hiring
I'm Adam Ramoul, based in Clarkson, Mississauga. I'm a computer science student at the University of Toronto Mississauga, and I'm building a small practice around careful, consent-first website reviews for local clinics and independent businesses.
I keep the scope narrow, explain the limits of what I can see, and tell you when something is not worth fixing. If your site is managed by a web agency, I'll work with them directly — or keep the review to public information only.
The short version of my rules
- I don't scan anything before you've said yes in writing.
- I don't invent problems to sell work.
- I quote fixes before doing them, and you approve every change.
- My reports say Confirmed, Needs validation, or Not applicable — never "probably hacked."
FAQ
Questions clinic owners ask
Is this a penetration test?
No. A penetration test simulates an attacker and is much more expensive. I do a non-invasive review of what the public can already see, plus the DNS records that control your email. It's the right starting point for a small clinic.
Do you need my passwords?
Never. The review works entirely on the public surface. If a fix would need credentials (like your DNS registrar or web host), I'll walk you through it step by step and you type the passwords yourself.
Do you see patient data?
No. I never access booking systems, records, payment pages, or anything behind a login. If a public form looks misconfigured, I flag it for your review rather than probing it.
What if you find nothing?
Then I tell you that. A clean report is a useful result — you can show it to your board, insurer, or web person. I do not invent problems to sell fixes.
My website is managed by an agency. Does that matter?
It can. Where work is needed, I loop your agency in with their authorization. Otherwise I can still do the public-information review and email/DNS check, and give you a document you can hand to them.
What happens after the review?
You get the report and a walkthrough call. If a fix is worth doing, I quote it in writing first — and the review fee is credited toward a fix booked within 30 days. If nothing urgent turns up, I'll say so and leave it there.
Contact
Start with a 10-minute conversation
Call or text 905-616-5021. I'm usually in and around Clarkson mornings and early afternoons; Tuesdays and Thursdays are best for in-person visits. There's no obligation and no scan without your written OK.