Security & Backups
A bad day should cost you an hour, not a week. Firewall, malware scanning, login protection and hardening keep most trouble out; tested backups stored away from the site make sure the rest can be undone. We run both, and we practise the restore before you need it.
What you get
- Web application firewall and rate limiting in front of the site
- Malware and file-change scanning with alerts to us
- Login hardening: strong passwords, two-factor authentication, limited attempts, no default accounts
- Updates applied on time, which prevents most incidents on their own
- Daily off-site backups, retained thirty days or longer, with restore drills every quarter
- An incident plan: what happens, who does what, how you are informed, all written down
When something does happen
We isolate, restore from a clean backup, find the way in, close it, and write you a plain-language report. If personal data was involved, we help you meet the reporting duties under the GDPR. What we do not do is pretend it never happens to anyone.
Security for custom software
Applications get the same care with more depth: dependency monitoring, secrets handling, role reviews, logging, and penetration testing by an independent party for systems that warrant it.
Questions we hear often
Is our site being attacked?
Every public site is probed daily by automated tools. The question is whether the probes find anything. Updates, hardening and a firewall make sure they do not.
Where are backups stored?
In a separate EU location from the hosting, encrypted, with access limited to the people who need it. A backup on the same server as the site is not a backup.
Can you take over a site that has been hacked?
Yes, and this is a common way clients find us. Cleanup first, then a care plan so it does not recur.
Guides on this topic
Who owns your domain? What to do when it is in someone else's account
Check who really controls your domain, DNS, hosting and website accounts, what to request from a former developer, and what to do if it is not yours.
Missed payment webhooks: the payment succeeded, the shop never heard
How to build a shop that survives lost, late and duplicate payment webhooks: durable processing, idempotency, signature checks and reconciliation.
What website maintenance really costs per month, and what it must include
What monthly website maintenance has to cover, what breaks when it is skipped, how to read a care offer, and an illustrative monthly cost breakdown.
Sleep better
A person answers within one working day. No obligation.