Our WebCare Plans provide monthly prevention, monitoring & restoration services to maintain a high level of security for your WordPress website.
Basic security without cutting corners
Setup, licensing & Configuration ($300 value)
Sucuri Firewall ($240 value)
Continuous malware scanning
Brute Force Protection
WordPress Core Updates
Full Site Backup (Monthly)
Database Backup (Weekly)
Remote Storage (Full Year)
Abandoned Software Check
Limited login attempts
Custom login address
Eyes on your site
Malware cleanup-in the unlikely event your site is infected, the first restoration is provided at half price-$50.
Comprehensive coverage for sites with higher traffic and frequent updates
Everything in the BASIC Plan
Private staging area for testing updates prior to execution
Unlimited Malware cleanup-in the unlikely event your site is infected, we fix it.
Google Analytics Reports (Monthly)
Google stats accessible from your WordPress dashboard
Comment spam monitoring & deletion
Support Tasks – help with “tiny tweaks” to your website
(up to 1 hour/mo)
Perfect for clients who need outstanding security AND ongoing content support!
Everything in the PREMIUM Plan
Content Management Assistance – (5 updates/mo, $300-400 value) including:
- Publishing client-provided blog posts
- Adding testimonials
- Edits/changes to written content
- Image search**
- Image formatting
- Comment monitoring
** Stock photo licensing fees not included
Includes installation & configuration of all security settings for your website including your Sucuri firewall and SSL certificate. We also purchase ongoing licenses for your theme in addition to our professional suite of plugins that secure and improve the functionality of your website.
We partner with Sucuri, a recognized online security company, to provide Firewall protection which filters all incoming traffic to detect and stop malicious traffic from reaching your website. Not only does this make your site more secure, it should make it perform better. (A big SEO plus!)
All our plans offer malware & hack scanning every 12 hours. If a hack is detected, we will work with Sucuri to restore your site–usually within six to eight hours.
(NOTE: Please see What if I Get Hacked in the FAQs below.)
SSL Certificate (Secure Socket Layer) is a digital certificate that authenticates the identity of your website. It also encrypts all data being sent from your website to the server–a requirement for all sites with e-commerce as well as something Google checks for when ranking your website. Although SSL certificates do nothing to protect from incoming traffic, having one is a signal to search engines that you are who you say you are and will appease the Search Enginge Gods over at Google.
All of our WebCare Plans include a status report that is sent to your inbox every month. Reports keep you out of the dark and reveal exactly what we have done to backup and secure your website. Also included: details on lockout incidents that prevented unauthorized users from attacking your website and uptime monitoring.
A Brute Force attack is a malicious, rapid-fire assault on your login page, executed by online scripts which try to crack username and password combinations thousands of times per minute. This not only puts your site at huge risk for a hack, it also negatively impacts site performance. If an IP address is determined to be attempting bad login attempts it will be permanently banned from your website.
Two-factor authentication is one of the best things you can do to secure the login area of your WordPress site. Once implemented, a code will be sent to your email address or smartphone that must be entered to gain entry to the dashboard.
The default login address for WordPress sites is /wp-login.php.
Since every hacker on the planet knows this, we change your login address to a unique URL, preventing hackers from attempting a Brute Force attack.
We will limit the number of consecutive login attempts to your website to protect from Brute Force attacks as well as anyone who is trying gain access to your site without authorization, such as: former employees, hackers, and unethical competitors.
In 2016 alone, WordPress issued five “Security and Maintenance releases” which are typically flagged URGENT. These updates are created in response to known threats to the WordPress software and should be done as soon as possible. All WebCare Plans include monthly checks & updates to the WordPress core, but we also drop what we are doing and update your software every time an URGENT update is announced.
Your theme is an additional layer of software that sits on top of the WordPress core software, providing a starting point for design & layout. Whenever the core software is updated, it is very likely your theme software will be updated as well to maintain functionality and security.
We check for new releases to your theme each month and upgrade accordingly.
Even though most hosting services create backups it’s essential to have your own–see Remote Storage. We backup your entire webiste–including database, software, files and images–every month to ensure quicker relocation or restoration when you need it most.
Every time any form of software (core, theme, plugins) is updated on your site, a database back-up should be made. Depending on how often you are adding content/updating your website, we will create database backups on a weekly or daily basis.
All backups should be stored far away from your hosting service–if your site goes down or your hosting company encounters a serious breach, your insurance policy won’t go down with the ship! Storing old backups within a Wordpress site poses security threats–the older the backup files, the more outdated & easy to penetrate the software contained within them will be.
Every now and then a plugin or theme is left twisting in the wind because the developer/author has thrown in the towel or moved on to other things. If we discover your theme or a plugin has been abandoned we will make recommendations on how to best move forward… either deleting or replacing it with a comparable alternative.
Every time software is updated there could be a conflict that affects the display and function of your website. This is why we check your site after every update to be sure it looks okay and is functioning properly. In the event a software conflict occurs, we cover up to an hour of our time to troubleshoot the problem. If we can’t fix it, we’ll roll your site back to the most recent version and provide you with recomendations.
An added bonus: we sometimes catch badly formatted blog posts/images, typos and broken links our clients would have otherwise missed!
The benefit of being able to sleep at night should not be underestimated–nor should the negative impact on your business, not to mantion your mental outlook should your site go up in flames. We don’t push our clients into signing up for WebCare, but we do know how time-consuming, expensive and dreadful dealing with a hacked site can be. The truth is, all of us sleep better at night when a plan to monitor, protect and quickly recover your site is safely in place.
Please inquire about a WebCare Plan now!
Additional Premium Services
As mentioned above, conflicts can occur any time your software is updated. Since conflicting plugins can dismantle functionality or cause portions of your website to display improperly, it’s a VERY good idea to have a copy of your site stored on our server where we test all updates PRIOR to executing them on your server. This minimizes potential down-time in the event a conflict occurs. (If a conflict does occur in our staging area, we will notify you & make recommendations.)
$100 per month value
One of the most common questions we get is, “What if I have little ‘tweaks’ to my copy, or I need to change a photograph? Are those covered?”
As much as we’d love to cover tiny changes for our clients, you can imagine they add up very quickly. With the Premium Plan, we will complete up an hour of tiny tweaks every month.
$100 per month value
Our Premium WebCare Plan includes a Google Analytics report that is emailed to you monthly. Although we do not include SEO with our plans, this report will show you where your traffic is coming from, which search engines and search phrases are being used, etc. Also included: a Google display panel right in your dashboard where you can check your stats every time you login to WordPress!
If you need ongoing assistance with updating your website, including: assitance with posting your articles, finding appropriate images, posting new testimonials or formatting web-friendly images, the Premium + Plan covers up to 5 updates per month. What a deal!
$300-400 per month value
Frequently asked questions
CAN I UPGRADE MY PLAN?
Yes! Simply let us know what plan you want and we’ll charge you the prorated difference for our current rate.
WHAT HAPPENS WHEN MY PLAN EXPIRES?
We will email you a month before your plan expires, inviting you to renew without interruption. Keep in mind that stopping will also stop updates to the plugins that were included in your plan, your firewall and SSL certificate. If, after cancelling, you wish to reinstate your plan, there may be a $50-$100 fee to reinstate software licenses and recreate your staging area if you had one.
WILL MY WEBSITE BE 100% SECURE?
The only hack-free website is one that isn’t online yet. Boo, hiss!
Since your website is created with software that is sourced from multiple places with multiple authors and is hosted by a company that is out of our control, there is no way we can promise you a hack-free website. No one can. The internet is constantly changing, as are hacking techniques. A new form of malware could come on the scene 4 months from now that no one is aware of.
For this reason, it’s imperative that every site owner be aware of the potential points of entry for hacks to take place–Susan wrote an informative article about it here. Each of us must take responsibility for our own online behavior as well – Mark, our lead programmer, wrote a blog post about the biggest threat to your website’s security here.
Please see WHAT IF I GET HACKED below for more information.
WHAT IF I GET HACKED?
While we do everything we can to button down your website, putting numerous security measures in place that greatly minimize the potential for an attack, one still might take place. (Please see WILL MY SITE BE 100% SECURE above.) If you don’t understand why, please peruse the security articles in our blog for more information or give us a call.
Sometimes, clients will understandably ask, then what am I paying for?
The health of your website is much like your physical health. You can eat the right diet, get loads of exercise, avoid cigarettes and alcohol – the whole nine yards – but there’s still a chance you’ll come down with the flu… or get cancer… or have a heart attack. The internet, like our bodies, isn’t iron clad.
So, I invite you to think of your WebCare Plan the same way as your health insurance plan, which you pay a monthly premium (and possibly a co-pay) whenever you visit the doctor.
In the unfortunate event your site does go down or we receive notice of malware on your site via the security measures we have in place, one of two things will happen:
1. WebCare clients receive priority attention. In the unlikely event a problem emerges, we’ll drop what we’re doing to attend to you.
2. If your site is encountering display or functionality issues, we’ll check for software conflicts first. If we don’t find any conflicts, we’ll proceed to #3.
3. If you’ve signed up for one of our Premium WebCare Plans and the problem doesn’t appear to be caused by a conflict, we’ll get in touch with Sucuri ASAP and submit a service ticket asking them to review and restore your website. All malware clean-up is included free of charge for Premium customers*.
4. If you have the Basic WebCare Plan, your first restoration is provided at half-price ($50). Additional clean-ups will be billed at $100 per incident (paid by credit card in advance) prior to submitting the ticket with Sucuri.
*Having a site go down without a plan in place can easily cost $1000 to fix, not including the impact of having your site go down. For an example, read this.
WHAT HAPPENS IF SOMETHING GOES WRONG WITHOUT WEBCARE IN PLACE?
For an initial $275 fee, we’ll do our very best to fit diagnosing your issue into our schedule and get back with you with a resolution or recommendations for getting it fixed. Please keep in mind that having a WebCare Plan in place reserves time in our calendar every month to secure your website.
WHAT IF I NEED MORE ONGOING SUPPORT THAN YOUR PLANS OFFER?
We provide quotes for custom content management that are based on your specific needs. Please email us or give us a call to discuss what’s best for you!
WHEN WILL I BE BILLED?
We bill annually and payments are due in advance. If you prefer making quarterly advance payments, please add an additional $25 per month to our posted fees.