Know what's wrong but no time to fix it? We'll fix it.
Your free check flagged a missing HSTS header, no Content-Security-Policy, a title that's too long or a wrong canonical. We apply those fixes on your site, then re-run the checks so you see before and after.
Haven't checked yet? Run the free SEO check or the free security headers check first.
Two fixed prices
Pay once. No subscription.
Fix Basic
$29 USDT or PayPal
Up to 5 issues in one area: security headers or on-page SEO.
- e.g. HSTS, X-Frame-Options, Referrer-Policy, or title, meta description, canonical
- One website
- Done within 3 business days of getting access
- Before/after check included
Fix Full Recommended
$49 USDT or PayPal
Security headers and on-page SEO together, up to 15 issues.
- Content-Security-Policy in Report-Only first, then enforced
- Titles, descriptions, canonicals, Open Graph on up to 10 pages
- robots.txt and XML sitemap
- Before/after report and 14 days of follow-up fixes
We never ask for your main password. Full refund if we can't fix what we agreed or if we're late. Not a penetration test or a compliance certificate. Questions? hello@huutran.dev
How it works
- Order and list what to fix (paste the free check results) and what the site runs on.
- Agree access within 1 business day of payment: pull request, limited account, or steps you apply.
- We fix it within 3 business days. CSP goes in Report-Only first so nothing breaks.
- Before/after check with the same free tools, sent to you.
Frequently asked questions
What do you fix?
Only what's visible from outside: security headers (HSTS, Content-Security-Policy, X-Frame-Options or frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), titles, meta descriptions, canonicals, Open Graph, lang, viewport, robots.txt and XML sitemaps.
What don't you do?
No content rewriting, link building, app bug fixing, penetration testing or compliance certification (PCI or otherwise). If a request is out of scope we say so before starting and refund you if you'd rather not continue.
Which platforms?
Most: WordPress, Next.js, Nginx/Apache, Cloudflare, Netlify, Vercel, plain HTML. Closed platforms such as Shopify don't allow some headers; we tell you upfront.
How long does it take?
Within 3 business days of getting the access we agreed. Late means a full refund.
Do you need my admin password?
No. A GitHub pull request, a limited account you remove afterwards, or exact copy-paste steps you apply yourself.
How do I pay?
USDT on TRC20 or PayPal, in USD.