Web application firewall
Every WordPress site we host runs behind a web application firewall, which turns away common attacks, such as cross-site scripting, SQL injection and bad bots, before they reach WordPress.
Vulnerability scanning
WordPress, its plugins and its theme are scanned regularly against known vulnerability databases, and a plugin with a known security hole is updated automatically. Anything still open shows in your monthly report, with what we recommend.
Security
SSL certificates
The padlock in the browser comes from an SSL certificate. We set yours up for free and keep it valid for you, with nothing for you to renew.
Security
Site isolation
Every website has its own environment and its own system user on the server, so a problem on one site stays on that site.
Security
SFTP and SSH
Access to the server is by SFTP and SSH only, both encrypted. There is no cPanel and no plain FTP.
Security
Server security updates
Security updates for our servers are applied automatically as they come in, so the software your site runs on stays patched.
Security
Firewall protection
Each of our servers runs its own firewall, as well as the web application firewall in front of every site.
Security
Fail2Ban
Fail2Ban watches for repeated failed logins to the server and blocks the address they come from, which stops brute-force attacks. It is on by default on every server.
Security