Three steps that work together
Do all three, starting with a backup.
- Step 1Back up
Keep a recovery copy
Save the website files and database so you can restore them.
- The aim
- Keep a separate copy and check that you can restore it.
- Keep in mind
- A backup cannot prevent an attack or fix every problem.
Check this step Files, database, retention, access and restoration.
- Step 2Maintain
Keep WordPress updated
Update the site and control who can sign in.
- The aim
- Back up, then test updates before going live.
- Keep in mind
- Someone needs to act on updates and problems.
Check this step Incident ownership, limitations and a separate recovery process.
- Step 3Protect
Add the protection you need
Use a scanner, firewall or specialist help to cover a real gap.
- The aim
- Compare free and paid tools for the problem you need to solve.
- Keep in mind
- A plugin cannot replace updates, access control or recovery.
Check this step Who configures it, acts on alerts and handles a compromised site.
The steps below are for WordPress. Using a hosted builder?Using a builder? Check what it handles
Compare the plans
Check the initial payment, commitment and renewal.
