Public Mission

Free In-depth Website Security Scan Services

2 January 2020
Protect Your Website: Prevention is the best action



With the aim of assisting local SMEs to identify and mitigate cyber security issues, HKIRC is now offering a free in-depth website security scan service to all .hk users. A detailed report and a phone consultation will be offered to all participant.


Potential Cyber Security Risk from Website:
  • Injection
  • Broken Authentication
  • Sensitive Data Exposure
  • XML External Entities (XXE)
  • Broken Access Control
  • Security Misconfiguration
  • Cross-Site Scripting (XSS)
  • Insecure Deserialization
  • Using Components with Known Vulnerabilities
  • Insufficient Logging & Monitoring


Why Do You Need It:
  • To get the picture of your website security condition
  • To protect against cyber-attack
  • To prevent leakage of sensitive information
  • To keep systems robust


Scanning Process:
  • The scanning process will not affect your website operations, no change of technical settings or passwords is necessary.


  • All .hk domain user


How to Join:
  1. Fill in the application form with signature and company chop
  2. Attach one scanned copy of the following supporting documents
    • Business Registration Certificate (BR) issued by the Inland Revenue Department (IRD) of HKSARG, or
    • Tax exemption letter issued by Inland Revenue Department (IRD), or
    • Certificate of a Society issued by the Hong Kong Police, or
    • Certificate of a school issued by Education Bureau of HKSARG
  3. Submit to


Success Stories:
  • Website security scanning tools helped clients locate problems hidden in their system
  • We helped customers who have technical difficulties in liaising with their hosting providers and vendors
  • Consultants provided professional advices and solutions to customers who have email phishing
  • Customers gained industry knowledge in cyber security


Case Sharing


Since its establishment seven years ago, iEnterprise has been actively helping to match people with different disabilities with jobs. In order to provide a safe and inclusive Internet environment for the minority to work from home, it joined HKIRC Website Scanning Programme.

>> iEnterprise


PixelByte Technology

PixelByte Technology is a typical local SME that regularly publishes product information and company events on its website. In order to understand the risks and weaknesses of the company's website, PixelByte Technology was one of the first companies to participate in HKIRC Website Scanning Programme.

>> PixelByte Technology



Phone: 2319 2303
FAX: 2319 2626
Address: Unit 501, Level 5, Core C, Cyberport 3, 100 Cyberport Road, Hong Kong