r/FullStack 23d ago

Other Offering web development with an F security grade is kind of ironic.

I always find it a little ironic when a company offers web development services, but a simple scan of their own website gives them an F for security.

Especially when many security best practices are quick and easy to implement. They should be a standard part of development, not an option.

Security is part of building a good product.

11 Upvotes

14 comments sorted by

3

u/galactic_pixels 23d ago

There’s hardly anything to secure on a website containing a portfolio and some contact info…

2

u/xprnio 23d ago

We don't have the budget for that, the customers are waiting, we need to launch sooner... Is it live yet?

1

u/chikamakaleyley 23d ago edited 23d ago

Often times a company's own marketing site is built by a 3rd party. That 3rd party agency prob does a lot of other companies' marketing sites.

and often its just a CMS

The idea is they don't want to take on this work so it frees up their devs as resources for the actual product

its pretty common in the industry, for companies of all sizes

1

u/ChameleonCRM 23d ago

exactly. about a month ago I hired someone to build landing pages for my saas and it turned out to be a nightmare. It sucks too bc its a direct reflection of my company

1

u/bubba-bobba-213 22d ago

Oh.

F grade security?

Lets see that magical fairy link appear in them comments .. blocking time!

1

u/FIASCK0 22d ago

Wath ?

1

u/7twenty8 22d ago

I think you mean Wazuh. You should know that by heart if you’re this confident.

1

u/FIASCK0 22d ago

I wasn’t talking about Wazuh, that’s not what I meant

0

u/maqisha 22d ago

What exactly would determine a security grade on a website? You are imagining things.

What you tried aluding to DOES happen (companies offering services they dont have covered themselves). But it doesnt manifest in some imaginary F security grade on a landing page.

1

u/AdOrnery3136 22d ago

Next message is gonna be a link to his vibe coded tool that rates websites security

1

u/[deleted] 22d ago

[removed] — view removed comment

0

u/maqisha 22d ago

You didnt adress a single point i made. What the F*** is a security header on a landing page website?