Security reviews are for finding visible weaknesses before they become an incident, an insurance problem, or an uncomfortable client question.
Sometimes, but only when scoped properly. Many small businesses first need a security review and hardening plan before deeper testing makes sense.
Yes. Findings include evidence and technical indicators, but the report is organised around risk, business impact and what to fix first.
Yes. Email and domain setup are often part of the same risk picture as the website or app.
A short call is enough to work out whether this is a website, app, automation, IT or security job, and whether it is worth quoting.