Website Security for Small Businesses
I harden small business websites before something goes wrong, and clean up and lock down sites that have already been hit.
Hardening
- Cloudflare in front of the site, with firewall rules that block secret file paths, unknown scripts and abusive networks
- WordPress login protection: blocked admin usernames, closed XML-RPC, hidden user lists and regular scans
- Plugin and PHP updates tested on staging first
- Every login and API key listed, unused ones removed, and keys kept in an encrypted vault instead of plain files
- Email authentication (SPF, DKIM and DMARC) so nobody can send email as you
Hacked-site cleanup and incident response
When a site has been hit, I find how they got in, remove what they left behind, close the hole, rotate the exposed keys one at a time, and check every page and form still works afterwards. You get a plain report of what happened and what changed.
Related
Related posts
No posts on this topic yet. New posts go up every week on the blog.
Not sure where to start?
Book a free 30-minute call. I look at your setup and tell you what to build first, with a clear scope and quote.