Skip to content

WordPress security

WordPress security:
we prevent, monitor, protect

Most websites are not broken into by brilliant hackers — they are broken into through outdated modules left untouched for months. Real security means constant prevention: firewall, timely updates, monitoring and a backup that actually works. We work mainly with WordPress, but we also secure sites on WooCommerce, other CMSs or custom builds.

WordPress security — firewall, malware scanning and continuous monitoring

What we do

Layers of protection,
not one magic solution

01

A configured firewall

We block malicious traffic and unauthorised access attempts before they ever reach the website.

02

Malware scanning

Regular checks for injected code, modified files and other signs of compromise.

03

Security updates

Critical security patches applied on time — most websites are broken into through outdated modules.

04

Continuous monitoring

We track the availability and integrity of the site so we can react fast when something goes wrong.

05

Passwords & access

Access hygiene: verified users, strong passwords, minimum necessary permissions.

06

A response plan

If something does happen, we have a verified backup and a clear plan for a fast restore.

Already have an infected site?

Malware removal: diagnosis first,
then a full quote

We will not guess at a price. An infected site can be cleaned in 2 hours or take 10 days of work — it depends on the severity. That is why we run a real diagnosis first and then give you an exact quote. No surprises.

1. Paid diagnosis

We analyse the infection, its severity and its cause in detail. From €49, depending on the type of website (see the table below) — and the amount is deducted from the final quote if you go ahead with us.

2. Full quote

After the diagnosis we know exactly what the job takes. You get a clear cost in hours or days — from €35/hour, and for large cases from €240/day.

3. Cleanup + prevention

We clean the site, secure it and recommend a monthly plan so it does not happen again. Without prevention, the risk of reinfection remains.

What the diagnosis costs

Brochure website

no online store

49

Small online store

up to ~500 products

99

Mid-size online store

~500–3,000 products

199

Large online store

over 3,000 products

Calculated individually

The difference comes from the number of products (cleanup effort grows with the size of the store). The diagnosis is deducted from the final quote if you accept the work.

Why does the diagnosis cost money? Because analysis time is real work — we investigate files, the database and the logs. That is how we give you a fair quote rather than a guess. See the full conditions in our Terms and conditions.

Request an assessment

FAQ

Questions about security

Answers to the questions we get most often. Can't find what you're looking for? We're one phone call away.

Can't find your answer?

Write or call us — you get a clear answer, with no technical jargon, within 24 hours.

Mon–Fri 9:00–18:00

How do WordPress sites get hacked?
In the vast majority of cases through outdated modules or themes, weak passwords or insecure hosting. That is why prevention — timely updates and monitoring — is far cheaper than a cleanup.
My site is already infected. What do I do?
Request a security assessment. We first run a paid diagnosis (from €49, deducted from the quote), then give you a full cleanup quote. Once it is clean, you move onto the monthly prevention plan so it does not happen again.
Do you secure websites that are not on WordPress?
Yes. We work mainly with WordPress and WooCommerce, but we also secure sites on other CMSs, custom platforms or plain HTML. The principles are the same: firewall, monitoring, timely updates and verified backups. Ask for an assessment and we will tell you exactly what can be done.
Can you guarantee my site will never be hacked?
No serious provider can guarantee 100%. What we guarantee is proper prevention (updates, firewall, monitoring) and a response plan with verified backups, so that an incident is resolved quickly rather than becoming a catastrophe.
What does Premium monitoring mean?
On the higher plans, monitoring runs more frequently and includes additional integrity and availability checks, with a shorter response time to incidents.
How much does it cost to clean an infected WordPress site?
We do not pull a fixed price out of thin air — an infected site may need 2 hours or 10 days of work. First we run a paid diagnosis (from €49 for a brochure site, deducted from the quote), then we give you the exact cleanup cost: from €35/hour, and for large cases from €240/day. Request a security assessment.
How long does cleaning an infected site take?
It depends on the severity of the infection and the size of the site. A brochure website is usually resolved in a few hours; a large online store can take several days. After the diagnosis we know the exact effort and give you a clear deadline.
How do I know my site has malware?
Typical signs: odd redirects to other websites, unknown pop-ups, a "Deceptive site" warning in Google, unknown users in the admin area, or an alert from your antivirus or host. If you see any of these, ask for an assessment quickly — the longer you wait, the harder the cleanup.
Google has flagged my site as "deceptive". What now?
Once we have fully cleaned the site and removed the malicious code, we request a review in Google Search Console. The warning usually disappears within 24–72 hours of approval. The key is that the site must be 100% clean, otherwise the penalty returns.
What is a WordPress firewall (WAF)?
A web application firewall (WAF) filters traffic before it reaches the site and blocks known attack patterns — injections, bots, brute force on the login page. It is the first line of defence and is included in the maintenance plans (Premium on the higher tiers).
Do you also secure WooCommerce stores?
Yes. For stores, security matters even more because you process customer data and payments. The Pro Woo plan includes Premium monitoring plus a check of the payment integrations after every intervention.
Free guide · PDF

The survival guide for your WordPress website

12 simple checks that keep your website fast, secure and online — even if you are not technical at all. It lands in your inbox in seconds.

  • The 4 ways you can lose your website
  • A printable 12-step checklist
  • What to do yourself vs. what to leave to a specialist
Download the free guide Free · no strings attached · delivered by email
Answer within 24 hours

Worried about your website's security?

Request a security assessment — we check the firewall, the risks, malware and the state of your backups, and give you a clear quote. WordPress or any other platform.

Or download the free guide (PDF) first — 12 checks, delivered to your inbox.

CallFree auditWhatsApp