Show your broker the evidence

Hardening
Free forever

Twelve security controls you can switch on and off individually: two-factor sign-in, login rate limiting that counts by address and by username, a custom sign-in URL, blocking of username-discovery scans, security response headers, an enforced password policy, XML-RPC off, the file editor disabled, version fingerprints removed, and more. Every change is logged with who made it and when. No licence needed, ever.

Evidence pack
$149 CAD / year

A dated PDF your broker can read, plus a matching JSON file with the same facts in machine-readable form and a checksum tying the two together. Covers your controls, your accounts, your backups and your documented exceptions. Generate a fresh one whenever you need — before a renewal, after a change, as often as you like while the licence is current.

Your controls,
as they stand

Each of the twelve controls, passing or not. WordPress and PHP versions and whether updates are outstanding. HTTPS and HSTS. Whether the file editor and XML-RPC are open.

Your people
and your backups

Administrator accounts, their roles and last sign-in, dormant accounts, and how many application passwords exist per user — never their values. Whether multi-factor is in place. Your declared backup restore test.

What you decided
to live with

Exceptions you have recorded, with your reason and the date. A documented, dated decision reads far better to an underwriter than a gap they discover themselves.

A plain-English
summary

A “what to send your broker” box, because the usual mistake is sending a technical document to someone who needed one paragraph and a date. Timestamped, with a review date 90 days out.

This is not insurance

Kwistech is not an insurer, a broker, or an agent. Buying this does not create, extend or guarantee any coverage, and it is not advice about what coverage you need.

This is not a certification

It is not CyberSecure Canada certification and not a Canadian Centre for Cyber Security assessment or endorsement. Where it cites CCCS baseline control numbers it does so only to show which topics the checks touch.

No broker is obliged to accept it

Insurers set their own evidence requirements. We make no claim that any broker or underwriter will accept this document, treat it as sufficient, or offer you better terms because of it.

It only sees your WordPress site

No malware scanning, no firewall testing, no review of your host, email, identity provider, devices, staff or network. Anything it cannot determine is reported as “unknown” rather than guessed.

Kwistech Secure
Free — install this first

All twelve hardening controls and the activity log. No licence, no account, no expiry. Everything on this page above the pricing is in here.

Download 1.5.0

Insurance Evidence Pack
Needs a licence key

Adds the evidence pack. Requires the free plugin and a licence key. Downloading it costs nothing and does nothing until a key is entered, so there is no harm in installing both up front.

Download 1.1.2