I am asked to write a first technical audit about the security best practices to improve a PHP web-site security.
I am wondering from where to start? Is there a famous audit forms to analyze and evaluate the security of a website? An online free tool to make the first check?
The website in question is a very basic one developed in PHP.