Website care and security

Somebody whose job it is to watch your site

Websites do not fail on the day they launch. They fail eight months later, when a plugin update breaks a form nobody noticed, or a login gets brute-forced at three in the morning. Care plans exist so that somebody is watching, and so the backup has been tested before you need it.

  • Updates applied safely
  • Monitored around the clock
  • Backups that are tested
  • A person who answers
What a care plan covers
  • Core, theme and plugin updates
  • Uptime and certificate monitoring
  • Malware scanning and clean-up
  • Backups taken and restored in test
  • Small content and fix requests
  • A monthly report you can read

Updates, monitoring, backups, security and a support route that does not begin with a ticket queue.

What we do

How we help with website care and security

Each piece can stand on its own, or run as one engagement with a single point of contact.

Updates, applied carefully

Core, theme and plugin updates on staging first, so an update never takes the site down.

  • Tested on staging
  • Rolled back if needed
  • Scheduled, not random

Monitoring

Uptime, certificates and errors watched constantly, so we usually know before you do.

  • Uptime checks
  • SSL expiry
  • Error and performance alerts

Security

Hardening, scanning and clean-up, with the boring preventative work done monthly.

  • Malware scanning
  • Login protection
  • Firewall rules

Backups that work

Taken off the server, kept to a schedule, and restored in test so you know they are real.

  • Off-server copies
  • Retention you choose
  • Restores rehearsed

Small changes

The steady stream of little edits that otherwise wait for weeks.

  • Content edits
  • Small fixes
  • Included hours each month

Support that answers

A route to a person who knows your site, rather than a general queue.

  • Named contact
  • Agreed response times
  • Escalation for emergencies
The test nobody runs

A backup you have never restored is a hope

Most sites have backups of some kind. Far fewer have ever been restored, and the difference only shows on the worst day. We restore backups into a scratch environment on a schedule, so the recovery is a procedure rather than an experiment.

  • Copies kept off the server, so one failure does not take both
  • Restores rehearsed, with the time it takes written down
  • Database and files, not just one of them
  • Retention that matches how quickly you would notice a problem
  • A written recovery procedure your team can follow without us
Backup storage equipment
How we work

Four steps, and you can see all of them

No long silences. You see progress as it happens and can change direction between stages.

  1. 1

    Take stock

    We inventory the site, its plugins, its hosting and its weak points before agreeing a plan.

  2. 2

    Stabilise

    Outstanding updates, obvious security gaps and missing backups dealt with first.

  3. 3

    Maintain

    A monthly rhythm of updates, checks, scans and small changes, on staging where it matters.

  4. 4

    Report

    A short monthly note: what we did, what we found, and what needs a decision.

Care plans cover the work that keeps a site healthy. Larger projects are quoted separately, and we tell you the difference before starting.

Tools and platforms

What we build with

Chosen to suit the job and to be maintainable by whoever comes next.

Watching
  • Uptime monitoring
  • SSL expiry checks
  • Error tracking
  • Performance checks
Protecting
  • Malware scanning
  • Web application firewall
  • Login hardening
  • Access review
Recovering
  • Off-server backups
  • Test restores
  • Staging environments
  • Recovery procedures

Care plans work best on sites we host, because we can see the server as well as the site. We do take on sites hosted elsewhere.

Who it is for

Where this work usually starts

Businesses without a technical team

The site matters, and nobody in the building is responsible for it.

Sites built by someone who left

An agency or a developer who is no longer reachable.

WordPress sites with many plugins

Every plugin is a door, and each one needs watching.

Stores that cannot afford downtime

Every hour offline is orders that went somewhere else.

Sites that were hacked once

Cleaned up, but nothing changed to stop it happening again.

Anyone unsure their backups work

Backups configured years ago and never tested since.

Questions

Website Care and Security, answered

Answer 01

What does a care plan include?

Updates applied on staging, uptime and certificate monitoring, malware scanning, off-server backups with test restores, a set amount of small change work, and a support route to a person who knows your site.

Not sure where to start?Talk to us

Let us look at what you have

Send us the site and we will tell you what state it is in, what we would fix first, and what a sensible plan would cover.