What is a website security audit and should it be part of maintenance?

A website security audit is a systematic review of a site’s security posture — checking for vulnerabilities in the software, file permissions, database security, login protection, and any exposed sensitive data. Security audits should be carried out at least annually as part of a comprehensive maintenance programme, and immediately following any suspected security incident.