services/security
A secure website is no accident.
Most WordPress hacks aren’t sophisticated attacks but bots looking for outdated plugins and weak passwords. I secure websites so they aren’t an easy target — and if a hack has already happened, I clean it up and close the hole it came through.
scope
What’s included.
WordPress hardening
Disabling unnecessary features, correct file permissions, hiding version information and a secure server configuration.
Firewall
Filtering traffic and blocking known attacks before they reach your website — at the WordPress or Cloudflare level.
Login protection
Two-factor authentication, login attempt limits and a tidy-up of user accounts.
Malware scanning
Regular checks of files and the database for malware, suspicious changes and vulnerable plugins.
Hack clean-up
Removing malicious code, replacing passwords and keys, patching the vulnerability and help with removing Google’s “dangerous site” warnings.
Backups as a plan B
Independent off-site backups that let you restore the website even if your hosting fails.
who it’s for
Who it’s for.
Recognise yourself in any of these? Drop me a line — let’s talk about your situation.
- Owners of websites showing strange content, redirects or spam
- Businesses whose hosting has suspended their site because of malware
- Websites handling customer data, forms or a store
- Anyone who wants to take care of security before something happens
faq
Questions about this service.
Don’t see your question? Drop me a line — I’ll give you a straight answer.
My website has been hacked. What should I do?
Change your hosting and WordPress passwords, don’t delete files on your own and get in touch. I assess the damage, clean up the website and close the hole the attackers used.
Isn’t a security plugin enough?
It’s a good start, but not the whole story. Without updates, strong passwords and backups, even the best plugin won’t protect your website.
Will my website be secure after the clean-up?
I remove not just the effects but the cause of the hack. To keep it that way I recommend ongoing care — regular updates and monitoring are the best protection.
services
Other services.
Most projects combine several of them — and one person takes care of all of it.
01/wordpress
WordPress websites
Company websites and business cards built on a lightweight custom theme. A friendly block editor so you can update content yourself — without plugin clutter.
02/woocommerce
Online stores
WooCommerce stores: payments, shipping, invoices and integrations. Set up to sell, not just to look good.
03/beyond-wp
Beyond WordPress
Static sites in Astro, headless CMS, landing pages and custom features in PHP and JavaScript — I pick the tool to fit the problem.
04/care
Maintenance and care
Updates, monitoring, backups and small content changes. Ongoing care that keeps your website simply working.
05/domain
Domain, hosting and email
Domain registration and renewals, DNS, SSL certificates, choosing the right hosting and business email. All in one place, under control.
07/a11y
Accessibility (WCAG)
Audits and implementations compliant with WCAG 2.2 and the European Accessibility Act. A website everyone can use — screen reader users included.
08/performance
Performance and technical SEO
Core Web Vitals, caching, image optimisation, structured data and a proper heading structure. Faster for people and for Google.
contact
Let’s talk about your website
Write a few words about your business and what you need. I usually reply within one business day — with specifics, not a template.
- what your company does
- new website, care or fixes
- current website address (if any)
- rough timeline