Website security
and support
WordPress hosting, security & support
Affordable, necessary and reliable website support
Your focus should be on running your business, not on sorting out issues with your website or email.
We offer two support package options to keep it fast, stable and secure, help you rank with Google and give you peace of mind.
What's changed?
It is no longer "best practice" to invest in your website security and support. With the power of AI, hackers have intensified their attacks. Active website management is now absolutely essential.
Thankfully, the overwhelming majority of WordPress hacks are preventable with some simple steps!
Hosting
Security
Support
Active site management
We look after new and existing websites.
You can host your website and email with us, or just your website, with a 99.99% uptime guarantee. Or we can simply take care of security and performance on your existing hosting package.
We offer a superior security solution to protect your business from cybercrime and reputational damage.
You get ongoing access to our library of theme and plugin licences.
We ensure your website performance is running smoothly, without errors and we fix small bugs.
Why you need ongoing support
WordPress has a vast market share, making it an attractive target for hackers
WordPress is a fantastic, scalable and flexible Content Management System (CMS) for websites. The open source and innovative nature of the platform has driven its success and it powers about 40% of all websites in the world.
The downside is that hackers look for the most gains from their efforts too, and the volume of WordPress websites means that they are a prime target for industrial, automated and AI driven cyber attacks.
To indicate the scale of the problem, top security software provider, Wordfence, reports it’s blocked more than 7.3 billion hacking attempts in the last 30 days.
Being hacked costs dearly in time & money
The cost of proactively preventing a hack is a pinch compared to the cost of fixing one. Research shows an average cost of $613 for developer time alone to restore your website.
Then factor in some of these consequences and you can see why the average cost of a hack to small businesses is $14,500 with effects that last 6-12 months afterwards:
Search engines quickly pick up on malicious activity, issue a penalty notice and you lose hard-won rankings.
Email service providers similarly blacklist your domain and your emails stop being delivered.
Social media websites and Google Ads pause your campaigns and stop you sharing your website links in posts.
Potentially, PayPal or other payment processors suspend your account.
If your website stores customer data in the UK then you have a legal duty to report a hack to the Information Commissioner's Office with remedial actions and steps to notify your customers, which can result in a loss of customer good will and a hit to your reputation.
It's very painful indeed, when you can prevent this so easily!
WordPress is secure; it's poor maintenance that leads to problems
WordPress is not more vulnerable than other platforms, it's just a bigger target.
Basic website security and hygiene — plus a website firewall, like Wordfence — will prevent the vast majority of attacks succeeding.
Patchstack 2026 reports that less than 1% of vulnerabilities are found in the WordPress core system. The major cause of security vulnerabilities are the plugins and themes used on a website. Patchstack has calculated that 5 hours is the median time to mass exploitation for heavily exploited vulnerabilities. That's scarily fast!
This is why we are also very careful about the plugins and themes we use in our web development. We have preferred, professionally maintained themes and a library of premium, well-maintained plugins that we use, and consistently keep up-to-date, to minimise this risk.
Hackers are fraudsters, scammers and spammers and they want your website!
Why do hackers even want your website, your business is small and your website isn't that valuable, surely?!
Don't be mistaken. Yes, hackers want your website. Here are a few reasons.
1. Your customer data. If you have a contact form that saves entries, bingo, then you have customer data, which hackers can sell on the black market.
2. To steal your customers' credit card details and to test stolen credit cards. If you have a checkout of any kind, then fraudsters can use your website in two ways. To inject malware that redirects your checkout page to a phishing site that collects your customers' card numbers. And with no malware whatsoever, they also will use your website to systemically test stolen credit card numbers, so they can find ones that work.
3. Spamming your website with ads or hundreds of posts - usually gambling, casinos and porn. They generate money from your website by posting ads and spam content.
4. To use your website server to power other attacks. Hackers who break into enough sites can use these to power more advanced attacks on bigger targets and hide their tracks.
How we protect your business
Research shows that hosting firewalls are not very effective against hacking exploits. The best protection is a firewall designed for WordPress. We use Wordfence Premium which provides real-time firewall updates that blocks hacking attempts.
We take responsibility for running WordPress, plugin and theme updates on your website. We run a mix of automated and manual updates at least every fortnight, and if there are any high or critical threats to your website, these are actioned when we receive the alert.
Your website uptime is monitored by our software and alerts us to any downtime by email, so we can respond to that as soon as possible. Our hosting guarantees 99.99% uptime.
Our clients benefit from daily backups, remotely stored, so we always have a library of versions of your website that we can restore automatically should you ever need it.
All our sites are encrypted with SSL/TLS certificates so that you protect your customer data and a secure padlock on your website. We also lock down your WordPress instance with login protection (2FA and passkeys) and restrict file permissions.
If you host a site with forms or checkouts, then we advise using Cloudflare as an additional layer of defence against bots. Cloudflare works at the DNS level and filters traffic before it reaches your server at all, which also absorbs high volume attacks that a plugin cannot.
Choose your option
Choose your package and sign up below.
We'll then be in touch to connect up your website!
Starter
£24/mo
For basic websites: hosting, critical security updates and licences
Pro
£72/mo
Complete peace of mind for business critical websites
Frequently asked questions
Help! My website has been hacked, can you help?
Yes. Please get in touch with us for immediate assistance.
We will need to know your website address and details of your hosting provider. We can help liaise with your host and we'll take you through the steps of cleaning up your website and setting up protections for the future.
Help! I made updates that I need to roll back, can you help?
Maybe. This does depend on what type of updates you've made that you need to reverse. There are some in-built functions in WordPress to restore previous versions. If it's not possible there, then it depends on whether you or your web host keeps recent back ups. If that fails we are may be able to manually restore your website to a previous version using a public web archive.
My website is so slow, glitchy, can you help?
Yes, absolutely. Please get in touch. We'll need to know your website and what you're experiencing.
Part of our Pro Peace of Mind package is speeding up your site and fixing glitches. What we do also tends to help your website's search engine friendliness, as an up-to-date, speedy website ticks boxes for Google and other search engines!
We keep getting fake orders or spam form submissions on our website. Can you stop this?
Yes. This is very common. Please get in touch so we can install some protections for you.
Our Pro Peace of Mind package covers this type of support on a regular basis.
Our outgoing customer emails are getting bounced all of a sudden. What's happening?
Please get in touch. We'll have to look at the bounce messages to be sure, but it's possible that your outgoing emails are missing some key security messages in the email header.
From time to time, Email Service Providers, like Outlook, Gmail, Apple, BT Internet or Yahoo upgrade their email security protocols. Lately they've been asking for more verification to prove the email is coming from the sender it declares. We'll run an analysis on your outgoing email set up to see if you're covering all these requirements and help you fix it.
I'm not receiving email leads from my website anymore, can you help?
Yes, absolutely. Please get in touch to show us the issue.
It may be the form is broken, or that the emails are being rejected and not even getting into your junk folder. In either case there is usually a simple fix.
Does your support include website copy or image updates?
No, Peace of Mind support doesn't include updates of website copy or media updates, new development, coding or creating additional graphics.
We do offer that sort of support too though! Please get in touch for a chat!
Where will my website be hosted?
We offer super-fast hosting from secure dedicated cloud or VPS servers using fast SSD drive, based in the UK.
Who will work on my site and where is my data held?
Once your site is live, it's a good idea to plan who is going to be responsible for your website health and security, and any future updates. You can do this in house, or you choose a support package, which means you can contact us for ongoing help. Please see our Website Care & Maintenance packages to see what we offer.
Or, if you simply want ad hoc support for future changes or development, or occasional troubleshooting then we are available to support at an hourly rate.
Is there a minimum length of contract?
No. Peace of Mind support is a rolling monthly subscription. You receive a monthly invoice and payment is made via GoCardless direct debit.
Should you need to stop the support or fail to make payment, you will lose hosting and access to any of our plugin or theme licences your website may use.
Can I move my website from another agency or developer?
Yes, of course. We help you make the move from a previous supplier as smoothly and securely as possible.
Who will work on my site and where is my data held?
We have a team based in the UK.
Data that we hold about you and your company will be stored within the UK. Your website will be hosted in the UK.
If your website uses apps or plugins from companies such as Mailchimp, or a Content Delivery Network, like Amazon Web Services, then your website data may also be held overseas, but you will be made aware of this and be able to opt in or out when we configure support options with you.
Can I book extra development work?
Yes
Do you have a few odd-jobs? Book these at our usual hourly rate of £50 + VAT.
Have a more substantial project in mind? Let's get together for a discovery session and we'll put together a proposal for you.
Do you know your website needs help, but not 100% sure what? Then we recommend our Website Review. This is a fixed price package at £240, where we undertake a questionnaire about your business and goals, alongside an analysis of your site to find out whether it is hitting the mark, and what can be done if it isn't! Drop us a line to find out more.