Dettogni Control Framework
Most businesses own their website.
Far fewer control it.
Why this exists
The website exists.
The control often doesn't.
A business commissions a website. A provider manages the hosting, the domain, the backups, the email routing. Everything works, until a provider disappears, a subscription lapses, or a platform shuts down. The business then discovers it never actually held the pieces it assumed it did.
Most businesses cannot confidently answer who controls their domain, who controls DNS, or whether they could recover the website independently. The Dettogni Control Framework exists to answer one question: does this business actually control the website it depends on, not just own it.
Not sure what this actually gets you?
Three steps.
One recommendation.
The framework produces a score, a set of findings, and a recommendation. Here is how that happens.
Start here
Get an indicative score
Checkable-from-outside evidence, domain records, DNS, TLS, gives an indicative Website Control Score across all six categories. Some categories cannot be assessed from a URL alone; the score shows exactly which.
If it is worth investigating
Get the full assessment
A short conversation covers what cannot be seen from outside: backup ownership, recovery testing, who is actually accountable. The result is a written Control Report with a specific finding and a recommendation.
Whatever it finds
A clear next step
Reasonable control already exists, Keep looks after it. Real gaps exist, Foundation takes responsibility for it. Either way, the recommendation is grounded in evidence, not built to justify a sale.
Built from doing this the hard way
Not theory.
A pattern seen enough times to name.
The same pattern kept recurring. A business would commission a website. Everything worked, until it didn't, and the business discovered it couldn't answer simple questions: who owns the domain, who controls DNS, who can recover the website, who is responsible when something breaks.
The problem was rarely technical. It was operational. The website existed. The control did not. Existing audits did not address this well: website audits focus on design, SEO audits focus on rankings, security audits focus on vulnerabilities. None of them ask whether the organisation controls the website it depends on.
Every assessment is scoped, performed, and delivered by one person: Alex Ulfeldt, a security engineer. No junior staff, no outsourced fieldwork. Read the full background →
The way in
Most businesses
find out the hard way.
You don't have to.
The Website Control Score and Assessment are being rolled out to a small first group of businesses. In the meantime, a twenty-minute call covers the same ground directly: what the framework would find on your website, and whether Keep, Foundation, Revenue-Critical, or nothing at all is the right next step.
No charge. No obligation. If the honest answer is that nothing needs to change, that will be the outcome of the call.
Dettogni Control Framework · United Kingdom · Remote engagements