A protected site, with backups for whatever comes*
SSL certificate, automatic backups with a copy kept off the server and security hardening: the site becomes harder to attack and, if something goes wrong, it goes back in minutes.
What is included
- An SSL certificate (HTTPS) live and renewing itself, never left forgotten
- Daily backups of the site and the database, with a weekly copy kept off the server
- A restore actually tested: one backup is restored to prove it works
- Security headers on the server (HSTS, nosniff, Referrer-Policy and framing protection)
- WordPress hardened: xmlrpc closed, no PHP in the uploads folders, user list behind login, plugins up to date
- Access details reviewed and separated: SFTP, database and panel, each with its own password
- Uptime monitoring, with the site checked from the outside every 15 minutes
- An email alert when the site goes down or the certificate is near its end
Who it is for
- Sites with no backups, or with backups nobody ever tested
- Anyone whose site was hacked, went down or got warnings from Google
- Shops and sites that take client data and have data protection duties
- Anyone whose hosting password is shared by three people and a former supplier
What you get at the end
- The before and after report, with what was closed
- The backups running on their own, with the schedule and where they are kept
- Proof of the restore test, with the date
- The list of reviewed access details, so you know who has what
How it works
-
Review
I look at how the site is protected today: certificate, backups, updates, access details and what is exposed.
-
Quote
You get what needs hardening, in order of risk, with a fixed price.
-
Hardening
I apply the measures, set the backups running on their own and close the access nobody needs.
-
Restore test
I restore a backup to prove the plan works, and show you the result.
Frequently asked questions
Is this a one-off job?
The hardening is done once; the backups and updates have to keep going. That is what the care plans are for, keeping the site watched every month.
Where are the backups kept?
On the server, for a fast restore, and a weekly copy off the server, in case the machine itself is the problem. A backup that lives only on the thing that failed is not a backup.
How long are they kept?
That is agreed in the quote, depending on the size of the site. The principle is always having a copy from before the day the problem appeared.
My site was hacked. Can you help?
Yes. First it is cleaned and restored from a clean backup, then hardened so it does not happen again and every access detail is changed. Get in touch with the site address.
Do the care plans already include this?
They include the daily backups, the security updates, SSL and monitoring. This service is for sites on other hosting or for having the hardening done in one go.
Shall we put your business online?
Tell me what you need and get a fixed-price quote within days.