A monthly security review
We read the malware scans and the blocked-attack figures for your site every month, act on anything that needs it, and tell you what we found.
Our hosting already scans for malware and blocks attacks around the clock. What it cannot do is notice. This service is someone reading those results, acting on them, protecting your email from being faked, and proving your backups restore before you ever need them.
Website Security
Priced per site
We check your site and email setup first, then quote. Every figure goes in your monthly report. No lock-in contract.
Ask about securityALREADY IN EVERY HOSTING PLAN
WHAT THE HOSTING CANNOT DO
Automation has no opinion about a site stuck on five-year-old WordPress, a domain that has stopped working, a warning landing in an inbox nobody reads, or a backup that fails the first time it is really needed. If the scanner found malware tomorrow, would anyone know? That is the gap this service fills.
We read the malware scans and the blocked-attack figures for your site every month, act on anything that needs it, and tell you what we found.
SPF, DKIM and DMARC set up for your domain, then monitored, so nobody can send email that looks like it came from you.
We test that your site can actually be restored, so the first restore is never the one you need in an emergency.
Old WordPress and unsupported PHP are the most common way small sites get exploited. We spot them before an attacker does.
SPF and DKIM check that email really came from an approved server, but SPF checks a hidden sender address, not the From line your customers actually read. Without DMARC, someone can pass those checks on their own domain while showing your business name in the From field.
DMARC ties the checks to the address people see, tells receiving mail servers what to do when a check fails, and sends a report back when it happens. We set it up in monitoring mode first, read the reports, and only tighten it once your genuine email is passing.
Usually not on our hosting. The server-level scanning and firewall cover the same ground as a WordPress security plugin, at a lower level, without slowing the site down. What most small sites are missing is not another tool. It is someone looking.
On one client's site, the hosting blocked 165 attacks in a single day in October 2026, and nothing got through. Until we looked, nobody had ever seen those figures. Read the Commercial Containers case study.
Real numbers from your own site, in plain English. Security sits alongside the Website Care Plan, and the two share one report.
We will check your site's security setup and email authentication and tell you plainly what is missing.