Real client case study. Every score and fix below is from an actual Digital Reforge engagement. Some technical specifics have been generalized rather than published in exact exploit-level detail, out of respect for the client.
FileWithCA
filewithca.com — Accounting, GST & ITR filing services
50
Before
→
76
After
Audited with the earlier 8-category version of our audit · External pass, then a full round of fixes
A real, trading e-commerce business with an unlocked front door. The store itself worked fine — checkout, cart, WhatsApp all functioned — but there wasn't a single security header on any response, and the pages meant to actually sell (ITR filing, GST registration) had broken search-result titles and placeholder descriptions.
What We Fixed
high
Unneeded public WordPress entry point✓ FixedClosed a WordPress entry point that didn't need to be publicly reachable, at both the application and server level.
high
No security headers on any response✓ FixedMissing clickjacking and content-type protections, now present on every page.
high
Exact software versions published to anyone who looked✓ FixedThe precise CMS, plugin, and language runtime versions were visible in the page source — a roadmap for targeting known vulnerabilities. All four separate leaks closed.
med
Broken search-result titles, sitewide✓ FixedEvery page title ended in a dangling hyphen instead of the site name — traced to one blank setting, fixed once, corrected on every page instantly.
med
Placeholder search descriptions on the highest-traffic pages✓ FixedSeveral key service pages showed "Call Now" or a raw address as their Google search snippet. Replaced with real, specific copy.
med
Missing share-preview image✓ FixedLinks shared on WhatsApp or LinkedIn rendered with no thumbnail. Fixed.
med
Missing H1 headings on service pages✓ FixedThe pages meant to rank for the business's core services had no primary heading for search engines to key off. Added.
low
Tap-to-call number wasn't a real link, sitewide✓ FixedVisitors had to manually retype the phone number instead of tapping it — fixed across the entire site, including a subtle formatting bug that could fail to dial on some phones.
low
11 images missing alt text✓ FixedPartner/software logos and key illustrations given real, specific descriptions — written after actually reviewing each image.
Want a report like this for your website?
Get a free, no-obligation 100-point audit of your own site — delivered within 72 hours, yours to keep either way.
Request Your Free Audit →