Security

Website security, built in

Protection at every layer, from Cloudflare at the edge to an isolated space for each site on our server. On by default, with real people to help if something goes wrong.

See plansGot hacked? Open a ticket
  • Cloudflare DDoS protection
  • Free SSL on every site
  • Daily backups on Business and up
FIREWALLBlocked2FA CODE482 913BACKUPDaily

Every layer, covered

No single tool keeps a site safe. So we stack them, and most are on before you even log in.

  • Free SSL

    Every site on HTTPS, with TLS 1.2 or newer and automatic renewal.

  • DDoS protection and firewall

    Cloudflare filters attacks and bad traffic before it reaches your site.

  • Business and up

    Daily backups

    A fresh copy of your site every day, ready to restore.

  • WP Business and Agency

    Malware scanning

    WordPress files are scanned for known malware, so problems are caught early.

  • Automatic WordPress updates

    Core, plugins and themes can update on their own, closing holes quickly.

  • Two-factor login

    Protect your client area with a code from your authenticator app.

  • Isolated PHP per site

    Each site runs in its own PHP-FPM pool, so one site's problem stays with that site.

  • Support in your language

    Our team helps by ticket in 17 languages.

Hacked?

Don't panic. Open a ticket and our team will help you restore from backup and clean up.

Open a ticket

How a visit is protected

From the moment someone types your address to the backup that sits behind it all.

  1. Filtered at the edge

    Cloudflare blocks attack traffic and serves cached files.

  2. Encrypted all the way

    HTTPS from the visitor to Cloudflare and from Cloudflare to our server.

  3. Isolated on the server

    Your site runs in its own PHP space, apart from other sites.

  4. Backed up daily

    On Business plans and up, yesterday's copy is always there to restore.

Questions, answered

Still unsure? Our team answers tickets in 17 languages.

Daily backups are included on Business plans and higher, for example Shared Business, Shared Pro, WP Business and WP Agency. See all plans for the details.

Yes, on WP Business and WP Agency. Your WordPress files are scanned for known malware.

Yes. When your domain runs on our Cloudflare, Cloudflare's network absorbs and filters attack traffic before it reaches your site.

Open a ticket. Our team will help you restore from a backup and clean up, and explain how to keep it from happening again.

Yes. Turn on two-factor login in your client area and sign in with a code from an authenticator app.

Each site runs in its own PHP-FPM pool, so a problem on one site stays there.

WordPress plans include automatic updates for core, plugins and themes, which you can turn on or off in WordPress Toolkit.

Security that is on by default

SSL, Cloudflare protection and isolated sites on every plan, with daily backups from Business up.

See plansTalk to us