What I do

• Updates: WordPress itself, the theme and every plugin brought up to date, after a backup.
• Less to attack: plugins and themes you do not use removed.
• A look for trouble: injected code, files that should not be there and admin users nobody recognizes.
• Cleanup: if the site has been hacked, the injected code removed and the way in closed where it can be found.
• The sign-in: strong passwords, repeated failed sign-ins blocked, and admin accounts limited to the people who need them.
• Backups: scheduled backups kept away from the site itself, and a restore actually tried.

What you get at the end

• A written list of what was found, what was changed and what to keep an eye on.

What this is not

No website can be promised to be safe forever. This is a cleanup and a lockdown done carefully, not round-the-clock monitoring.

How I work

• You give me access to the site and tell me what you have noticed.
• I back it up before I touch anything.
• I do the work, check the site still works page by page, and hand over the list.

Pricing

The work is quoted after a short conversation and a first look at the site. See how pricing works.