Whatwe do

WordPress security
and protection.

We'll check your site's security, fix the vulnerabilities found and set up protection. We'll help reduce the risk of hacking, lost requests and halted sales.

Order an audit for $50

Audit $50 ·

Protection from $250 ·

WooCommerce from $400

Protection before an incident

Why now is the time to address your site's security

State of components

Your site can run for years without updates or visible problems. But in that time, known vulnerabilities can appear in its plugins, theme and server software.

Automated attacks

AI helps attackers find weak spots and prepare attacks faster. A small site can be a target too: an automated attack doesn't need to know your company's name, it only has to find a vulnerable component.

Business operations

For a business, the consequences are concrete: broken forms, lost orders, unwanted ads or losing access to the site. It's worth checking your protection now, while the site is working and changes can be made on a planned basis.

NCSC assessment: the impact of AI on cyber threats to 2027

Cybersecurity specialists forecast a rise in threats. The UK's National Cyber Security Centre (NCSC) expects that through 2027, AI will continue to make attacks more effective, increasing the frequency and intensity of cyber threats.

The source is in English. It's a forecast of how threats will develop, not an estimate of the likelihood that a specific site will be hacked.

NCSC assessment: the impact of AI on cyber threats to 2027

When to have your site checked

  • WordPress, plugins or the theme haven't been updated in a long time.
  • The site was built by a contractor you're no longer in touch with.
  • You don't know which PHP version your hosting uses.
  • Access remains with former employees or several contractors.
  • Backups exist, but nobody has tested restoring from them.
  • The site takes inquiries or orders, but nobody is responsible for its technical condition.

If the site is already infected

Seeing unknown pages, redirects or browser warnings? Tell us when you contact us. We'll estimate diagnostics and cleanup of an infected site separately; cleanup is paid additionally.

What we check and protect

WordPress, plugins and themes

We check versions, known vulnerabilities and update availability. We determine which components can be updated, removed or will need replacing.

PHP and the hosting environment

We check the PHP version and available security fixes. If needed, we coordinate actions with hosting support.

Accounts and access

We review administrators and user permissions. We set up two-factor authentication and restrict unnecessary access.

Protection settings

We check file permissions and access to system data. We set up tools suited to the site for filtering malicious requests and protecting login.

Backups and recovery

We set up backups to separate storage and test restoration in a test environment.

Site operation after changes

We check the main pages, forms and login. For WooCommerce, we also check the cart, checkout and agreed payment scenarios.

Services and pricing

Security audit

$50

To understand the state of the site and the cost of the necessary changes.

  • Check of WordPress, PHP, plugin and theme versions
  • Check for known component vulnerabilities
  • Check of access, core protection settings and backups
  • Initial check for signs of compromise
  • Report with priorities and the cost of fixes

WordPress hardening

from $250

For company and service websites that need fixes and protection set up.

  • Backup and rollback plan
  • Updates with compatibility checks
  • Removal of unnecessary components
  • Setup of access, 2FA and protection
  • Backups and a restoration test
  • Feature checks, report and recommendations

WooCommerce protection

from $400

For stores, where changes are tested with orders, customers and integrations in mind.

  • WordPress hardening
  • Check of store extensions and staff access
  • Check of the cart and checkout
  • Check of agreed payment and external integrations
  • Backups matched to how often orders come in

The audit fee is credited toward payment for the follow-up work.

What the final price depends on

Number and condition of components

A site with 10 plugins and one with 50 require different amounts of checking. Developer support, availability of fixes and compatibility also matter.

Site functionality

User accounts, subscriptions, multiple languages and external services add scenarios to test.

Custom code

Custom themes, plugins and modifications to third-party components may require separate work.

State of hosting and PHP

An outdated environment and hosting limitations can make updating harder.

Presence of infection

Finding and removing malicious code is paid separately after diagnosis.

How wework

How the work goes

  1. Request

    You send the site address and contact details. We clarify the project's specifics and confirm the audit scope. We arrange the handover of access through an agreed secure channel.

  2. Audit

    After the $50 payment, we check the site and prepare a report with priorities and the cost of fixes.

  3. Approval

    We approve the list of work, the price and the timeline. The audit is credited toward the total: if the work costs $250, $200 remains after the audit.

  4. Hardening

    You pay the remaining amount in two stages: 50% before work begins and 50% after the result is checked. Before making changes, we prepare a backup and a rollback plan.

  5. Handover of results

    We hand over a report on the changes made and the remaining risks, maintenance recommendations, and the results of the backup and restoration checks.

Office interior with glass partitions

Terms of
work.

Scope and price

After the audit, you'll receive a list of work and a fixed price before it starts. We carry out additional tasks only after the scope and price are agreed.

Paid licenses, hosting and third-party services are paid separately. Site migration, replacing components that requires reworking functionality, and fixing custom code are estimated separately.

After the work

For 7 days after completion, we fix errors caused by our changes at no extra charge.

Don't include passwords in your request. We'll agree separately on how to hand over access.

Before launch.
Questions and answers.

Is installing a security plugin enough?

Protection also depends on PHP, hosting, installed components, access and backups. We choose protection tools after checking the site.

Do you guarantee the site won't be hacked?

The risk can't be eliminated entirely. We fix the weak spots found, set up protection and test restoration. The report lists the work done and any remaining limitations.

If the site is already hacked, can you help?

Yes. First we'll determine the scope of diagnostics and recovery. Infection cleanup is paid separately and is not part of the starting price of hardening.

Can an update break the site?

Conflicts with old components are possible. We prepare a backup and a rollback plan and check the agreed features after the changes. We test complex updates in a test environment first.

After one-off work, does the site no longer need maintenance?

New vulnerabilities and updates appear regularly. We'll give maintenance recommendations. If needed, ongoing support can be agreed separately.

Haven't updated WordPress in a while? Start with a check

For $50, we'll check the site, identify the priority risks and quote the cost of the necessary work. If we continue working together, the audit fee is included in the total.

Order an audit for $50