Secure WordPress hosting,
looked after.
Your site on hardened, managed hosting, with updates, backups and monitoring handled by a human who knows it's there. You run the business; we keep the lights on and the doors locked.
Why hosting is a security problem
Most WordPress break-ins aren't clever. They're an old plugin, a shared password, or a backup nobody ever tried to restore.
Out-of-date is the attack surface
WordPress itself is solid. The risk lives in plugins and themes that haven't been updated since the site launched, because updating felt scary and nobody owned it.
Cheap hosting is shared hosting
On a bargain plan your site shares a server, and often an account, with hundreds of strangers. When one of them gets compromised, you're in the blast radius.
A backup you haven't restored isn't one
Backups quietly fail, fill up, or capture a site that was already infected. The only backup that counts is one someone has actually restored and checked.
What's included
One flat monthly fee per site. Everything below is part of it, not an add-on.
Hardened hosting
Your site gets its own isolated account, not a slot on a shared box.
- Web application firewall in front of every request
- Rate limiting and bot filtering at the edge
- HTTPS everywhere, certificates renewed automatically
- Server software kept patched and supported
Updates, tested
Core, themes and plugins kept current on a schedule, not whenever someone remembers.
- Updates applied on a set cadence, security fixes sooner
- The site is checked after each update, not left to chance
- Anything that breaks is rolled back and you hear about it
- Abandoned plugins flagged and replaced
Backups you can restore
Daily copies, stored away from the server, and a restore that's been rehearsed.
- Daily off-site backups, retained for 30 days
- Restore tested and documented, not assumed
- Point-in-time restore on request, same business day
- A fresh backup before every update
Scanning and monitoring
Someone is watching, and that someone has a phone.
- Malware and file-integrity scans
- Uptime monitoring with alerts to a person
- Login hardening: two-factor, limited attempts, no "admin" user
- Access reviewed so old contractors don't keep keys
Email that arrives
Contact forms and order confirmations are only useful if they reach an inbox.
- SPF, DKIM and DMARC set up for your domain
- Site mail routed through a proper sending service
- Form submissions logged so nothing vanishes
A named person
The same human every time, who knows your site and answers the phone.
- Same business-day response
- A monthly summary of what changed and why
- Plain-language answers, no ticket lottery
- Documented setup you own, no lock-in
How we move you in
Migration is included. Your current site stays live until the new one is checked and you've said yes.
-
Review
We look at the site as it is today: plugins, theme, traffic, what's fragile, what's already compromised. You get a short written summary before anything moves.
-
Migrate and test
A copy of the site goes onto the new hosting at a private address. We fix what the review turned up, then you click through it and approve.
-
Cut over
DNS switches at a quiet hour you choose. The old host stays up for a week as a fallback, then gets shut down properly so nothing is left running unattended.
-
Steady state
Updates, backups, scanning and monitoring from then on, with a monthly note telling you what happened and a real person when something's wrong.
Built for small business
If your site runs on WordPress and the business would notice if it went down, this is for you.
Sites this is good for
- Brochure and service-business sites
- Small WooCommerce stores
- Membership and booking sites
- Professional practices: clinics, firms, studios
- Blogs and publications the business relies on
- Sites that have been hacked once, and you'd rather not repeat it
Plain pricing
One flat monthly fee per site, fixed in writing before anything moves. It covers the hosting, the updates, the backups, the monitoring and the person. No per-visitor surprises, no renewal markups, no "security add-on" upsell. If you ever want to leave, you get a full copy of the site and the documentation to go with it.
Tell us about your site
Send the address and whatever worries you about it. We'll have a look before we talk, and reply within one business day.