Website Security
Security audits, hardening and incident response so your website is defended, monitored, and recoverable.
Every website is a target — automated bots probe millions of sites every day looking for the one that hasn't been patched. Our security engagements cover the full stack: audit, hardening, WAF configuration, patching, monitoring, and a tested incident response plan. And if the worst happens, we can get you back online.
The outcomes we're accountable for.
Full-stack audit
Application, hosting, plugins, dependencies and third-party integrations reviewed.
WAF configured
Enterprise-grade web application firewall with rules tuned to your platform.
Patch programme
Regular framework, plugin and dependency patching with test coverage.
Monitoring & alerting
Malware, uptime, SSL and DNS monitored 24/7 with alerting.
Backup & recovery
Off-site backups with documented restore procedure and periodic drills.
Incident response
Priority response and remediation if a site is compromised.
The process, step by step.
- 01
Audit
Full security audit against OWASP Top 10 and platform best practice.
- 02
Harden
Configuration, WAF, headers, TLS, authentication and access hardened.
- 03
Monitor
24/7 monitoring for uptime, malware, SSL and DNS changes.
- 04
Patch
Monthly patch cycle with automated testing where possible.
- 05
Respond
Documented incident response plan, tested annually.
Answers before you have to ask.
- Is my website really at risk?
- Yes. Automated bots attack every internet-facing site daily. Small business sites are targeted more, not less, because they're often less defended.
- Do you handle hacked sites?
- Yes — incident response and site cleanup available on 24-hour turnaround for priority clients.
- Do you do penetration testing?
- Yes — application-level and infrastructure pen tests via our security partners.
- Is this covered by a Care Plan?
- Basic security monitoring and patching yes. Deeper audits and pen testing quoted separately.
- What does security cost?
- Audit from £950. Ongoing security monitoring from £75/month. Incident response from £950 per incident.
Often paired with website security.
Monthly Website Care Plans
Everything your website needs to stay fast, safe and current — bundled into one predictable monthly fee.
Read moreWebsite Hosting
Managed hosting for businesses that want their website fast, secure, and handled by real people.
Read moreWebsite Maintenance
Ongoing care that keeps your site fast, secure and current — without you having to think about it.
Read moreWebsite Support
Direct access to senior engineers when something goes wrong — or something needs to change fast.
Read moreSleeping easy about your website's security?
Book a call and we'll scope the right level of protection for your business.