I'm asking this here because this forum doesn't have a dedicated 'security' section.

I've been thinking about starting a little service in my part time where I audit website and server security, and I was wondering, how much would you be willing to pay for:

1. A full security audit of all the code in your website, with a detailed report on all vulnerabilities found, as well as patches.

2. A full security audit of your web server, with a detailed report on security issues on the server.

Thanks in advance, replying to this thread will really help me out a lot

rob87,

In my experience people don't want to pay for security. As long as the code runs, then that's fine (why do you think we have so much bad code lying around?). I know of a few businesses (that I won't name) that knowingly run some very unsecure code. They don't have the budget to fix it and they will wait until it breaks to fix it.

Once it breaks though, that's when they are willing to pay about _anything_ to fix their code.

Maybe you could try scanning a few local sites in your community, find problems and then charge them a few hundred dollars to fix them?


Pod.

Originally Posted by just_a_pod

rob87,

In my experience people don't want to pay for security. As long as the code runs, then that's fine (why do you think we have so much bad code lying around?). I know of a few businesses (that I won't name) that knowingly run some very unsecure code. They don't have the budget to fix it and they will wait until it breaks to fix it.

Once it breaks though, that's when they are willing to pay about _anything_ to fix their code.

Maybe you could try scanning a few local sites in your community, find problems and then charge them a few hundred dollars to fix them?


Pod.

This is so true, being in hosting I see so many people think they are ok until something happens to their server. They don't understand how important it is to have a secure server. Or the problems that can happen if they don't! I've seen services for $30 to $150 to secure a new server. As far as fixing a problem server I have never seen for less then $50 a hour. Good luck