+61 2 9043 1246

Website security

Every website gets a black box.

Your website’s security logbook.
Server and developers included.
Monitored 24/7.

Your site, off your mind.

Free website health check
Firewall & security headersnot checked yet
Software and versionsnot checked yet
Hosting locationnot checked yet
Email spoofingnot checked yet

Free, under a minute, in plain English.

How it works

“Are we affected?” Now you know.

We don’t guess. We read what’s installed on your server. Which software. Which version. Which fix.

24/7 Monitored Uptime watched from outside your network, day and night. All paid plans
01HR Vulnerability checks Your software checked against the vulnerability databases every hour. All paid plans
24HRS Your software Exact versions read from your server and site every night. All paid plans

AI is finding software flaws faster. So we check every hour. Being exploited right now? It goes to the top. Already patched by Ubuntu? We can tell. Can’t check something? We say so. Findings close on proof.

The message you get when a vulnerability is published

demo.com.au · silverstripe/cms 5.4 has a published vulnerability (CVE-2026-54717), rated medium. Fixed in 6.2.1. Entry #0213.

Example, from a connected site.

“I could immediately see what was being done.”

Manager, Information Security & Technology · 22 October 2026

The free check looks from the outside. A logbook looks from the inside.

Check your site free

The logbook

We find it. We fix it. We prove it.

Your black box is a security logbook. One per site. Every finding. Every fix. Every change. Dated and in order. Marketing sees what changed. IT gets the audit trail.

Logbook · demo.com.au OverviewSecurityService history
16Managed by BLACKBX
0Need your action
UpUptime
24/7Monitored

Security findings · checked hourly

CriticalCVE-2026-49261MariaDB10.11.14Managed by BLACKBX
HighCVE-2026-53215Ubuntu Linux kernel24.04Managed by BLACKBX
MediumCVE-2026-54717silverstripe/cms5.4 → 6.2.1Managed by BLACKBX

Service history

29 SepSecurity · PostgreSQL CVE resolved · updated on server
27 SepSecurity · forms plugin vulnerability patched
24 SepNotice · lookalike domain found · can receive email
20 SepRenewal · SSL certificate renewed

Sample, redacted. On Monitor, findings show under “Need your action”. On Maintenance, we fix the site’s software and your host handles the server. On Full service, we handle both.

Every logbook shows

  • What’s running. Server, database, PHP, CMS, plugins, packages. Exact versions.
  • What’s exposed. Downloadable backups. Server info pages.
  • What’s broken. Broken links. Missing images and files. Redirect problems.
  • Who has the keys. Admins without MFA. Logins unused for 30 days. On WordPress, Magento and Silverstripe.
  • What’s expiring. SSL. Domains. Software past end of life.
  • Who’s posing as you. Lookalike domains. Email spoofing. Blocklists.
  • What happened. Uptime, outages and every change we make or detect, live and staging. Support tickets.

Maintenance plan adds

  • We patch your site’s software: CMS, plugins, code
  • Defacement watch
  • Developers to fix what’s found

Full service plan adds

  • We patch the server too
  • Open server login checks
  • Australian hosting
  • Backups
  • Migration included

Website security. Not IT security. Your website and its server. That’s the job.

Every logbook connection is built for your environment: WordPress, Drupal, Magento, Silverstripe or custom. Ask us about yours

When someone asks what happened, you have the answer.

Next time the cyber-insurance questionnaire asks about patching, you’ll have the record.

Pricing

Three ways we look after your website.

Monthly, no minimum term. Maintenance works wherever your site is hosted now.

Monitor

You fix it. We watch it.

$99/month + GST

30-day free trial for Australian businesses, on application. Your host, your developer.

Everything in the free health check, plus

  • Nightly checks
  • Uptime monitoring
  • Vulnerability scanning
  • Service history
Apply for a 30-day trial

Maintenance

We look after the site. Your host runs the server.

From$840/month + GST

Developer hours each month, sized to what you need. Your host, our developers.

Everything in Monitor, plus

  • Developers on staff
  • Updates & patches
  • Security fixes
See what’s included

Not sure yet? Start with a free health check: a graded report on your site in under a minute. Works on any website.

Check your site free

The price you start on is the price you renew on.

Full service runs on Google Cloud, AWS or our Australian VPS servers: how our managed hosting works.

Compare everything that’s included

Who we are

Serviced by the people who build high-traffic websites.

BLACKBX is the website service department from UnDigital (opens in a new tab) — same company, same engineers, fifteen years building websites for organisations like these. New features, bug fixes and rebuilds go to UnDigital (opens in a new tab).

NSW Government
Seven West Media
hipages
Australian Associated Press
Landcom
Sekisui House
Oz Design Furniture
McKenzie's Foods
DrinkWise
Wisdom Homes
Bowdens
Iberdrola

You’ll always deal with a person, never an unnamed inbox.

Call +61 2 9043 1246

Knowledge base

The latest in website security.

  1. GHSA-pcrw-h46h-c93h: the Mongoose countDocuments() filter bypass, explained for website owners

  2. The Contact Form 7 file upload flaw: the WordPress form plugin bug fixed in 6.2.4, explained for website owners

  3. CVE-2026-119977: the WordPress Core upgrade-window flaw, explained for website owners

Read the knowledge base

Free health check

When did anyone last check your website?

We’ll check it now. Free, in under a minute.

We look for what goes wrong while nobody’s watching: out-of-date software, plugins with known security holes, email that can be faked, certificates about to lapse. You get a graded report in plain English, ready to forward.

What happens next

01You get your reportGraded, in plain English, in under a minute
02Your report stays openYour private link works for 30 days
03You choose a planMonitor, Maintenance or Full service
04Or you don’tNo obligation. The report is yours either way.