Bondstone
MenuClose
Cyber Security
Data Intelligence

Growth services

Who we serve
Research
Company
Free website check
Free website check

Bondstone Cyber Security

Your website, secure. And proven secure.

Our Cyber Security team finds what is wrong with a website, cleans it up, rebuilds it properly, and keeps it safe. Every finding comes with the exact place we found it, so you can see it on your own site.

Check my website freeSee what we do
  • Public records only
  • Every finding with its proof
  • Every price on the page

Free website security check

Has your website been hacked?

Enter your web address. We read only what any visitor and a search engine can already see. No sign-up, no login, no change to your site.

We read public records only, the same ones a search engine reads. Privacy.

A result in seconds, with the proof.

For organisations

Your organisation and every supplier you pay, checked and watched.

For councils, public bodies and enterprises, and the organisations that supply them. Every finding comes with the proof.

External Exposure Audit

What it reads, across your whole organisation

  • Your whole footprint Every hostname your organisation shows the internet, including the ones nobody remembers.
  • Signs of a break-in Hidden spam, injected links and pages on any of those sites, each with where we read it.
  • Email that can be faked Whether anyone can send email in your name, on every domain you own.
The audit
from£2,500once, by the size of your organisation
Monitoring
from£495a month, read every week, on a 12-month term
Your report
5 working daysfrom your authorisation
Request a briefing See the audit

Supplier Watch

Every supplier you pay, read every week for email that can be faked, hacked websites and lapsed web addresses, with a ranked list from your own payments and an alert the day anything changes.

from£12,000a year, invoiced

See Supplier Watch

Supplier Check

What it checks, for every supplier on your list

  • Email that can be faked Anyone can send email that looks like it came from them, including to the people who pay their invoices.
  • A hacked website Spam or code slipped onto their site, which visitors and search engines see and they usually don't.
  • A lapsed web address An old address they let go, which anyone can buy, along with the email still sent to it.
Free check
Freeup to 500 suppliers, read once, kept 30 days
Plans
from£49a month, read every week, with an email when anything changes
Public sector
£12,000a year, up to 10,000 suppliers, read every week, with an email when anything changes
Check your suppliers free See Supplier Check

Most hacked websites look fine to the owner.

The damage is hidden: spam pages built on your domain that only a search engine sees, admin logins left exposed, files that should never be public, code slipped into your pages.

It sits there for months, quietly costing you search rankings, trust, and sometimes customers' card details. You do not get an email when it happens. You find out when a customer, or Google, tells you.

What we find

  • Hidden spam text on your own page
  • Links slipped in to someone else's site
  • Pages on your domain you never published
  • Admin usernames left on show
  • Files that should never be public
  • Out-of-date website software
  • Spam shown only to Google
  • Skimming code on a checkout
  • A staff email caught in a breach

To look for these signs yourself, read how to tell if your WordPress site has been hacked and what spam pages cost you

The proof

Proof you can open yourself.

Every finding we show you cites the exact place we read it and the day we read it. If we cannot prove it, we do not say it.

  • The page. An address on your own site, which you can open in any browser.
  • What is wrong. In plain words, with the hidden text or the link itself.
  • The day we read it. So you can see the evidence is live, not an old report.
Free website checkillustration

example.co.uk

Read 18 Oct 2026, 14:02 BST

Compromised

Hidden text on your own page

A block of text on your home page that a visitor cannot see but a search engine reads, advertising online casinos.

On example.co.uk, which you can open yourselfhttps://example.co.uk/
The hidden text, as a search engine reads itBest online casino bonuses. Play slots now, no deposit needed.
An illustration. The business is invented; the kind of finding is real.

What we do

Find it, clean it up, rebuild it where it needs it, and keep it safe.

  1. 01

    Find it

    We read what any visitor and a search engine can see of your site and show you exactly what is wrong, with the link or the record that proves it.

  2. 02

    Clean it up

    We remove the injected spam, the hidden pages and the malicious code, close the exposed logins, and hand you proof the site is clean.

  3. 03

    Rebuild it

    Where a site is old or fragile, we rebuild it on a modern, hardened, fast foundation. Secure by design, not patched after the fact.

  4. 04

    Keep it safe

    Ongoing monitoring, backups and patching, so the next attempt is caught and stopped before it costs you anything.

What it costs

Start with the free check. The rest you buy only when you need it, at the price on this page.

One-off

Emergency Clean-Up

For a site that has been broken into and needs it gone, fast.

£495one-off

  • Clean within 48 hours of getting access
  • A report proving the site is clean
See the clean-up

Fixed before we start

Secure Rebuild

For a site that is old or fragile, or keeps being broken into.

from£1,950one-off

  • Content and search rankings carried over
  • SSL, security headers, backups and locked-down logins built in
See the rebuild

Month to month

AI Secure Care

For a site you want watched, so the next attempt is caught.

from£49a month

  • A same-day alert in plain words, with the proof
  • Three plans, cancel any time
See the plans

Hacked right now? Here is what to do, and what not to delete. The first hour after a hack

What “AI Secure” means

The same tooling that can read a million websites a day, watching yours.

It checks your site around the clock for the signs of a break-in:

  • A new page you did not publish
  • A file that appeared
  • A login that leaked
  • A staff email caught in a breach

When something changes, you hear about it the same day, in plain words, with the proof. That is the difference between a flat yearly security review and a site that is actually watched.

Need a website that wins work too? Our Websites team builds fast, secure sites built to be found in Google and AI answers. See Websites

Who we are

Bondstone is a data intelligence specialist. Our Cyber Security team watches the open web for the signs a business has been compromised, and puts it right.

Every finding we show you cites the exact place we read it and the day we read it. If we cannot prove it, we do not say it.

About Bondstone

Questions

Is the check really free?

Yes. No account, nothing to install, and no change to your site. We read only what any visitor and a search engine can already see.

What does compromised mean?

Your real site is still there, but spam or code has been slipped on top of it, almost always hidden from you. It is fixable, and we show you the exact place we found it on your own domain.

Will you change anything on my site?

No. The check reads your public pages and nothing else. We change a site only once you ask us to put something right.

How fast is an emergency clean-up?

Within 48 hours of getting access. We remove the injected spam, the hidden pages and the malicious code, close the exposed logins, and hand you a report proving the site is clean, for £495.

Do I need to give you access?

Not for the check, which reads only your public pages. For a clean-up, a rebuild or a Care plan, yes: the site's admin login and the hosting login, used only for the work you asked for.

What if the site can't be saved?

Then we say so plainly and quote a Secure Rebuild, with the price fixed before we start, and the £495 you paid for the clean-up comes off it. Rebuilds start from £1,950.

See the state of your own site in ten seconds.

No sign-up. Just your web address.

Free. We read only what any visitor and a search engine can see. Privacy.

Rather talk first? Ring 0113 490 0521, weekdays 9am to 5pm UK time. At any other time, book a call and we ring you back.

Free website checkRing