Website security
Website security, looked after every month
We lock down your WordPress site, keep it updated and checked every month, and fix it when something goes wrong. For sites hosted anywhere: a £195 hardening pack, then from £49 a month.
Hosted with us on Hosting and care or the tiny IT department? This is already included.
Why small business sites get broken into
Most are not picked out by a person. Automated bots work through websites all day and night, looking for an old plugin, a weak password or a login page with no limit on guesses. The fixes are known and dull, and nobody does them unless it is their job. We make it ours.
Lock it down, then keep it that way
Start with the hardening pack. Monthly cover keeps everything it put right in place, and fixes what goes wrong.
Hardening pack
£195 one-off
Your site locked down in one go, with a written report.
- Two-factor login for every admin
- A limit on failed logins
- Firewall set up and tuned
- File permissions and security headers put right
- Admin users reviewed, old accounts removed with your OK
- Every plugin with a known security hole listed, with what to do
- A written report of what we found and changed
- Anything we break, we undo within 7 days
Website security
£49/month
For a brochure site: checked every month, fixed when it breaks.
- Everything the hardening pack put right, kept in place
- Scans every day, read by us every week
- WordPress, plugin and theme updates, sooner when a plugin you use has a known hole, with the site checked after each run
- Admin users and risky plugins reviewed every month
- Backups checked: a recent copy kept off your server, and one set up if there is none
- A fix when something breaks, up to an hour of work a month
- A short monthly security note
Website security for shops
£79/month
For a site that takes payments, bookings or customer logins.
- Everything in Website security
- Checkout and login pages checked after every update
- Your checkout protected against card-testing attacks
- A fix when something breaks, up to two hours of work a month
- Your price is held for 12 months. No introductory prices: the first price is the renewal price
- Cancel with one email and 30 days' notice after any minimum term. No exit fee and no phone call
- Your domain stays in your name and the site is yours: if you leave, we hand over the files, the database and the logins
- We reply within one working day, Monday to Friday
- Monthly cover starts with the hardening pack, then runs rolling monthly
- Already hacked? The clean-up is a fixed price agreed before we start. A hack after your first 30 days on a monthly plan is cleaned up within your fix time, and if it needs more we agree a fixed price before going further
How it works
-
Ask for a free check
Send us your web address. We look at what anyone can see from outside and tell you what we found, free.
-
Give us our own login
You create an admin account for us, so you never share your password. Access to your hosting helps but is not essential.
-
We lock it down
We work through the hardening pack and send you a written report of what we found and what we changed.
-
We keep it that way
On a monthly plan: scans, updates, reviews and a short note every month, and a fix when something goes wrong.
What we have done for our own clients
Client names are left out on purpose. The person who does this work is the senior developer who builds and hosts our clients' sites: no juniors, no call centre.
A hacked site cleaned up
48,600 spam pages removed, the three vulnerable plugins that let them in taken out, and Google asked to drop the pages.
A flood of bots blocked
When a scraper network of around 10,000 addresses hammered a club's website, we blocked it and set the server to recover by itself.
Card testing stopped
When criminals used a shop's checkout to test stolen card numbers, we blocked the attack and checked the payment account.
No one can honestly promise a website will never be hacked, and we will not. We promise yours is locked down, checked every month by a person, updated carefully and fixed quickly when something goes wrong.
What this does not cover
- Office computers, phones and Wi-Fi, and Cyber Essentials
- Your email accounts (that is the tiny IT department)
- Websites not built on WordPress
- Building new features
- Your host's own server. If the host is the problem we will tell you, and we can host your site instead
Questions people ask
Do I have to move my hosting to you?
No. Website security is for WordPress sites hosted anywhere. If you host with us on Hosting and care or the tiny IT department, it is already included.
What do you need from me?
Our own admin login on your site, which you create for us, so you never share your password. Access to your hosting panel helps too, for backups and file permissions, but it is not essential.
Can you promise my site will never be hacked?
No one can honestly promise that, and we will not. We promise your site is locked down, checked every month by a person, updated carefully and fixed quickly when something goes wrong.
My site has already been hacked. Can you help?
Yes. Tell us what you are seeing and we agree a fixed price for the clean-up before we start. Once you are on a monthly plan, a hack after your first 30 days is cleaned up within your monthly fix time.
What if an update breaks something?
We check the site after every update run. If something has broken, we roll the update back or fix it.
Is this Cyber Essentials?
No. Cyber Essentials covers your office computers, phones and network. This covers your website.
Every site we look after sits on one ladder
Start on the rung you need and step up when you want more. The same people and the same terms on every rung: your price held for 12 months, one email to cancel after any minimum term, your domain and site stay yours, and a reply within one working day.
-
1
Hosting
£15/month
Your site hosted properly, backed up every day and moved for free.
-
2
Hosting and care
£39/month
Plus updates, website security and a fix when something breaks.
-
3
The tiny IT department
from £79/month
Plus your domain, email, renewals and admin, for firms of one to five people.
-
4
SEO plans
from £350/month
Plus the work that brings more customers from Google, with a monthly report.
Ask for a free security check
Send us your web address. We look at what anyone can see from outside (the padlock, security headers, software that shows its version, an open login page) and reply within one working day with what we found. Free, with no obligation.