The security basics every business site needs
HTTPS, backups, updates, and the handful of habits that prevent most disasters.
Most website break-ins are not clever. They are automated programs trying thousands of sites for the same few weaknesses: an out-of-date plug-in, a reused password, a forgotten admin account. That is good news, because a short list of habits closes most of those doors.
1. HTTPS everywhere
The padlock in the address bar means traffic between your visitor and your site is encrypted. Certificates are free and renew automatically on any decent host. Every page should use it, not just the checkout.
2. Updates, on a schedule
Known flaws in old software are the most common way in. Whatever your site runs on, someone should be responsible for applying updates regularly — and for removing plug-ins and themes you no longer use.
3. Backups you have actually restored
Automatic, kept somewhere other than the server itself, and tested. A backup nobody has ever restored is a hope, not a plan.
4. Strong sign-ins
A password manager, a unique password for every account, and two-step verification on anything that matters — especially email, the domain registrar, and hosting. Those three accounts are the keys to everything else.
5. Only the access each person needs
Give everyone their own login rather than a shared one, limit what each can do, and remove accounts when people move on.
Security is less about building a wall than about not leaving the keys in the door.
6. Collect less
Data you never stored can't be stolen. Ask only for what you need, and never keep card numbers yourself — let a payment processor handle them.
7. Someone is watching
Uptime checks and alerts mean you learn about a problem from a notification, not from a customer.
If something does go wrong
Know in advance who to call, how to take the site offline, and where the backups are. Ten minutes writing that down now is worth hours later.
None of this is exotic, and most of it is routine maintenance. If you would rather not carry it yourself, it is exactly what a monthly care plan is for.
A free 30-minute call, no pitch. We'll help you figure out what you actually need.
Book a free call →