Website security
Every website gets a black box.
Your website’s security logbook.
Server and developers included.
Monitored 24/7.
Your site, off your mind.
How it works
“Are we affected?” Now you know.
We don’t guess. We read what’s installed on your server. Which software. Which version. Which fix.
AI is finding software flaws faster. So we check every hour. Being exploited right now? It goes to the top. Already patched by Ubuntu? We can tell. Can’t check something? We say so. Findings close on proof.
The message you get when a vulnerability is published
demo.com.au · silverstripe/cms 5.4 has a published vulnerability (CVE-2026-54717), rated medium. Fixed in 6.2.1. Entry #0213.
Example, from a connected site.
“I could immediately see what was being done.”
The free check looks from the outside. A logbook looks from the inside.
The logbook
We find it. We fix it. We prove it.
Your black box is a security logbook. One per site. Every finding. Every fix. Every change. Dated and in order. Marketing sees what changed. IT gets the audit trail.
Security findings · checked hourly
Service history
Sample, redacted. On Monitor, findings show under “Need your action”. On Maintenance, we fix the site’s software and your host handles the server. On Full service, we handle both.
Every logbook shows
- What’s running. Server, database, PHP, CMS, plugins, packages. Exact versions.
- What’s exposed. Downloadable backups. Server info pages.
- What’s broken. Broken links. Missing images and files. Redirect problems.
- Who has the keys. Admins without MFA. Logins unused for 30 days. On WordPress, Magento and Silverstripe.
- What’s expiring. SSL. Domains. Software past end of life.
- Who’s posing as you. Lookalike domains. Email spoofing. Blocklists.
- What happened. Uptime, outages and every change we make or detect, live and staging. Support tickets.
Maintenance plan adds
- We patch your site’s software: CMS, plugins, code
- Defacement watch
- Developers to fix what’s found
Full service plan adds
- We patch the server too
- Open server login checks
- Australian hosting
- Backups
- Migration included
Website security. Not IT security. Your website and its server. That’s the job.
Every logbook connection is built for your environment: WordPress, Drupal, Magento, Silverstripe or custom. Ask us about yours
When someone asks what happened, you have the answer.
Next time the cyber-insurance questionnaire asks about patching, you’ll have the record.
Pricing
Three ways we look after your website.
Monthly, no minimum term. Maintenance works wherever your site is hosted now.
Monitor
You fix it. We watch it.
$99/month + GST
30-day free trial for Australian businesses, on application. Your host, your developer.
Everything in the free health check, plus
Apply for a 30-day trialMaintenance
We look after the site. Your host runs the server.
From$840/month + GST
Developer hours each month, sized to what you need. Your host, our developers.
Everything in Monitor, plus
See what’s includedMost popular
Full service
We’re responsible for all of it.
Quoted
Price on application. Our host, our developers.
Everything in Maintenance, plus
Get a fixed monthly quoteNot sure yet? Start with a free health check: a graded report on your site in under a minute. Works on any website.
Check your site freeThe price you start on is the price you renew on.
Full service runs on Google Cloud, AWS or our Australian VPS servers: how our managed hosting works.
Who we are
Serviced by the people who build high-traffic websites.
BLACKBX is the website service department from UnDigital (opens in a new tab) — same company, same engineers, fifteen years building websites for organisations like these. New features, bug fixes and rebuilds go to UnDigital (opens in a new tab).












You’ll always deal with a person, never an unnamed inbox.
Knowledge base
The latest in website security.
Free health check
When did anyone last check your website?
We’ll check it now. Free, in under a minute.
We look for what goes wrong while nobody’s watching: out-of-date software, plugins with known security holes, email that can be faked, certificates about to lapse. You get a graded report in plain English, ready to forward.
What happens next