SSL, backups, and keeping your site safe

Security on a small-business site isn’t about paranoia — it’s a few sensible basics done consistently. Here’s what we look after and what’s worth knowing.

SSL / HTTPS — included on every plan

Every site we host gets a free SSL certificate, so your address shows https:// with the padlock. This isn’t optional any more:

• Browsers warn visitors away from sites without it.
• It encrypts anything submitted through forms.
• Google treats HTTPS as a (small) ranking signal.

The certificate renews automatically — you don’t have to think about it.

Backups and updates

As part of lifetime maintenance, we keep your site’s software current — patches and security updates are applied so known vulnerabilities are closed — and we keep backups for disaster recovery. Most attacks target out-of-date software, so staying current is the single highest-value habit — and it’s handled for you.

We’re honest about backups: keep your own copy of anything irreplaceable too. We can provide a full export of your site any time you ask.

What keeps sites safe (your part)

• Use strong, unique passwords for any logins you hold, and don’t reuse them across sites.
• Tell us before installing unknown plugins or pasting third-party code — that’s the most common way a clean site gets compromised.
• Be wary of “your site is infected” emails demanding payment. Forward anything suspicious to us; we’ll check the facts before you act on it.

If something looks wrong

Defacement, strange redirects, or a browser warning — open a ticket straight away. The sooner we look, the smaller the cleanup. With patched software and backups in place, recovery is usually quick.