Smart Audit passively checked 884 company websites. The average security score is 19 out of 100, and one in five websites has internal files open to the outside: user lists, Git folders, files with passwords, even database copies. We go through the numbers without jargon: what they mean for the owner and where to start fixing.
5 steps to protect your account
On October 21 out-of-band PHP updates came out and CERT-EU issued an emergency advisory: two vulnerabilities rated 9.2 out of 10 allow a server to be taken over without any password at all. For foundations and volunteer initiatives the main risk is not a damaged website but quietly swapped donation details.
The in-house Smart Audit service checked 832 websites of Ukrainian companies. The average score is 22 out of 100, and security is below 50 on 86% of sites. We look at what is wrong and what to do about it.
