Websites & online presence
Securing your website
Fending off attacks before damage is done
What this is about
Websites are rarely attacked deliberately, usually by automated tools. We close the standard gaps, harden delivery and make sure an incident is resolved in minutes instead of days.
What is included
- Security headers and a strict content security policy
- Protecting login areas against brute-force guessing
- Regular updating of all components
- Daily backup with fast restore
- Scanning for known vulnerabilities
Process
How we go about it.
Check
What is reachable and what is out of date?
Harden
Put headers, permissions and access in order.
Secure
Test backup and restore.
Monitor
Report anything unusual.
Frequent questions
This is what we are often asked.
Is a security plugin enough?
For standard systems it is one component, not a concept. Updates and backups matter more.
How do you notice a break-in?
Often through unfamiliar files, sudden redirects or spam sent from your own domain. Monitoring picks this up sooner.
What should be done if it happens?
Take the site offline, restore from a clean backup, close the gap and change the passwords, in that order.
Sollen wir uns das ansehen?
Ein kurzes Gespräch genügt, um einzuschätzen, was in Ihrem Betrieb sinnvoll ist — und was nicht.