Website Security
I review how your website is exposed, tighten access and updates, and plan what happens if something goes wrong. No site can be made risk-free, but most avoidable risks can be reduced.
New v6 draft from the service brief, awaiting review
The problem
- The site runs plugins, themes or components that nobody has updated for a long time, and former staff may still have admin access.
- Your host or a scanner flagged changed files or warnings, and you do not know how serious it is or what to do first.
- If the site were compromised tomorrow, nobody has decided who restores it, from which backup, or what to change afterwards.
What I do about it
- I check what is installed, who has access and what is out of date, then tighten the most exposed points first.
- I look at the warning, work out what it means, and plan the clean-up in an order that protects your data and your backups.
- I put a recovery plan in writing: backups, restore steps, password changes in the right order and who does what.
Draft copy, to confirm
What you get out of it
Fewer avoidable weak points, and a recovery plan you can follow if something does go wrong.
Who it’s for
- You run a business site and have never had its access, updates or backups reviewed.
- You think the site may already be compromised and want a calm, ordered response.
- You have recently taken over a site and do not know what was left installed or who still has a login.
- You take enquiries or payments through the site and want the sensible precautions in place.
If you simply want routine updates and checks, website maintenance or WordPress maintenance covers them without a separate security review. If the site is already broken or locked, website rescue and recovery is the better first step.
What’s included
Access review
Who can log in to the site, hosting, domain and DNS, with unused accounts removed and strong sign-in such as two-factor login set up where available.
Updates and clean-up of unused code
Software brought up to date, with unused plugins, themes and components removed rather than left switched off.
Hardening
Sensible configuration changes, firewall rules and file permissions suited to the platform.
Monitoring
Scanning for changed files and known vulnerabilities, with alerts routed to a person who will read them.
Backups and restore planning
Backups kept away from the live site, with a restore tested so recovery is a known process.
Clean-up planning
If something has got in, a plan to contain it, restore a clean copy where possible, close the gap and check search engines for warnings.
How it works
Review
I check the site, its accessible files, its users and its hosting setup, and list what is exposed.
Prioritise
Findings are ranked by how likely and how serious they are, so you can see what to fix first.
Harden
I apply the changes we agree, with a backup taken first and the key pages and forms checked afterwards.
Plan and monitor
You receive a written recovery plan, and monitoring is set up for what matters.
Questions people ask
Draft answers, to confirm
Can you make my website secure?
I cannot promise that any website is fully secure. I reduce the avoidable risks, keep software current and make recovery a planned process.
What should I do if my website has been hacked?
Take a backup of the current state before changing anything, then restore a clean copy or clean it in place. Change all passwords after the clean-up, not before, or the attacker may log in again.
Do you do malware removal?
I can plan and carry out a clean-up on platforms I support, and I tell you at the start what is realistic for your site.
How often should a website be checked for security problems?
Updates and scans are best on a routine, monthly at least for a business site. Access and hosting setup are worth reviewing at least once a year.
Tell me what you need to achieve.
We can work out the right next step before committing to a solution. You can book this on its own. An ongoing partnership is optional, never a requirement.
Need continuing responsibility rather than a defined project? Ongoing partnerships