Our city
Web agency RabatExpertise
We check the security of your sites and applications, fix what must be fixed and guide you through compliance with laws 09-08 and 05-20.
What we do
A site or an application is exposed from the day it goes live. Common flaws are rarely sophisticated: a CMS never updated, an admin account without a second factor, a form collecting data without consent.
We start from the real state: a technical audit, a prioritized list of fixes, then support to correct and comply. Law 09-08 governs personal data protection, with the CNDP as regulator. Law 05-20 sets cybersecurity requirements, with the DGSSI as national authority. A free pre-audit lets you start without commitment.
Services
A web security audit examines the security state of your site or application: server configuration, security headers, HTTPS certificate, CMS and plugin versions, forms, admin rights and accounts. You get a report with fixes ranked by priority.
Law 09-08 protects individuals regarding the processing of their personal data, and the CNDP checks its application. A site that collects data (contact form, registration, applications) must inform users, obtain consent and limit retention.
Law 05-20 sets rules to protect information systems. The DGSSI, the national information systems security directorate, is the national authority. We check with you whether you are concerned, map your systems and build a prioritized action plan.
Multi-factor authentication adds a second proof to the password: a phone code, an authenticator app, a physical key. A stolen password is no longer enough. SSO gives one login across your applications.
We host your platforms in certified data centers, in Morocco or abroad, according to your sovereignty, proximity and budget constraints. We also run them in our own data center: updates, monitoring, support, named contacts.
Good to know
Send your site address. An expert checks these points and calls you back with what to fix.
Solutions
Frequently asked questions
Law 09-08 protects personal data. Any organization that collects or processes personal data in Morocco is concerned, with the CNDP as regulator.
It targets in particular administrations, public bodies and critical infrastructure operators. We check your case with you.
Server configuration, security headers, HTTPS, CMS and plugin versions, forms, uploads, admin accounts. You get a prioritized list of fixes.
A second proof of identity in addition to the password, such as a code on your phone.
In a certified data center in Morocco or abroad, or in our own data center, depending on your constraints.
Yes. Four points checked from your site address, no commitment.
Request the pre-auditOther expertises
FORNET is a web development agency in Rabat with deep Drupal expertise.
We design and build mobile apps connected to your platforms, for administrations, operators and companies.
FORNET puts artificial intelligence to work on concrete tasks: mail, documents, quotes, support.
We help organizations take paper out of their processes, offer clear journeys to their users and be found online: dematerialization, consulting, interface design, UX research and SEO.
Contact
An expert answers within 24 working hours.
