One-time services to assess, harden, or recover your website — with clear findings, fixed pricing, and no ongoing commitment required.
If you're not sure how healthy or secure your site is, this scan gives you a complete, plain-English assessment and action plan.
Flat price covers a standard small-business site: one domain, up to 25 pages, no online payments. Larger, e-commerce, or regulated (finance/health) sites — request a quote.
If your site looks fine but new customers still can't find you, this audit shows how clearly search engines and AI tools understand your business, your services, and how your pages connect to them.
Flat price covers a single site of up to 20 key pages. Larger sites, multiple locations, or many service pages — request a quote.
Whether you just need authentication fixed or require full reputation building, these services ensure your emails actually reach inboxes.
If your emails are landing in spam, showing warning banners, or failing after forwarding — but your domain has existing sending history — this repairs the SPF, DKIM, DMARC, and routing issues breaking trust with Gmail and Outlook.
If you're launching a new domain, recovering from reputation damage, or your emails land in spam despite correct authentication — this builds the sending reputation inbox providers require before they'll trust you.
Variable-scope work where an honest flat price isn't possible. You get a clear, fast quote before any major work begins — no open-ended billing.
If your site is hacked, infected, defaced, or blacklisted, we start immediately with triage and containment to stop the damage — then give you a full remediation quote within the first hour. We don't quote recovery as a flat price sight-unseen, because scope ranges enormously: a single injected file is a very different job than a multi-site portfolio compromise.
$299 is a fixed triage & containment fee, credited 100% toward your full remediation. You'll have the complete remediation cost within the first hour — no open-ended billing.
If you're launching a new or redesigned site, this ensures your site is fully hardened, backed up, monitored, and safe before you send real customers to it. Final price varies with your platform, the complexity of the build, and how many sites you're launching.
For most one-time services (like the AI & GEO Visibility Audit or the Website Health & Security Scan), we do not need logins. We review your public site from the outside.
For email services, we’ll need access to your DNS provider to verify and correct records. For the Comprehensive Email Deliverability package, we’ll also need temporary access to connect your mailboxes to the warm-up service.
For Emergency Recovery, if your site is hacked or defaced, we may request secure, temporary access to contain the incident and, during remediation, safely clean up malware and restore from backups.
For audits, you receive:
If you’d like Stonegate to implement the fixes for you, we can either quote that as a follow-up project or move you into an ongoing protection plan.
Incident response scope ranges enormously — from a single injected file on one small site to a coordinated, multi-site portfolio compromise. Quoting a flat “recovery” price sight-unseen would either overcharge simple cases or fall short on serious ones.
Instead, you pay one fixed triage & containment fee to get started immediately. We contain the incident, assess the full scope, and give you a complete remediation quote within the first hour — and your triage fee is credited 100% toward that remediation. You get speed and a known total cost, fast.
Typical turnaround times are:
If you’re in crisis (hacked, blacklisted, or down), we prioritize you.
No. These services are non-intrusive audits and reviews, not penetration tests.
We don’t run exploit tools or attempt to break into your site. Instead, we focus on the things that matter most to small businesses: configuration mistakes, missing protections, weak visibility in AI/search, and whether your backups and security will actually protect you when something goes wrong.
You keep the report, findings, and action plan — they’re yours to use however you want.
Many businesses choose to:
Most clients start with a one-time service, then stay for ongoing protection once they see the value.
Authentication Fix is right if your domain has been sending email for a while but something broke — emails suddenly going to spam, warning banners appearing, or forwarding failures. The problem is usually misconfigured DNS records, and fixing them restores deliverability quickly.
Comprehensive Email Deliverability is right if you’re starting fresh (new domain, new email provider) or recovering from serious reputation damage. Even perfect authentication won’t help if inbox providers don’t trust you yet — that takes 30 days of controlled warm-up to build.
Not sure? If your domain is less than 90 days old or you’ve had a security incident that affected email, start with Comprehensive. Otherwise, Authentication Fix is usually enough.
You can, but it’s often more expensive that way. The Comprehensive package includes everything in the Authentication Fix, so you’re not paying twice for the same audit work.
If you’re genuinely unsure whether you need warm-up, start with the Authentication Fix. If deliverability doesn’t improve within a week of the fixes propagating, we can credit what you paid toward the Comprehensive package.