WordPress security services
WordPress security services that keep hackers out
A security plugin alone is not enough. WPsupporters secures your WordPress website in layers: hardening, a firewall, daily scans, malware removal and offsite backups, managed by real people so you don't have to understand the technical side.
Rated Excellent on Google (47 reviews) · Works with any host · WordPress specialists since 2018
Daily security scan
yourwebsite.com
Core files integrity
Clean
Plugins & theme
Up to date
Malware scan
No threats found
Firewall
Active
Login protection
2FA enabled
Scan complete
Example of a daily security scan.
Daily
security and malware scans
24/7
uptime monitoring, 365 days a year
Up to 4x
offsite backups every day
2 hours
maximum response time to every ticket
The basics
Why a security plugin alone isn't enough
WordPress security is the set of measures that protect your website against hackers, malware, spam and data loss. A security plugin is only one of those layers.
Real protection also needs a hardened login, secure server settings, a firewall, regular scans, timely updates and offsite backups. Most security plugins leave several of these open, and their settings are hard to get right if you're not a specialist. That's exactly the part we take off your hands.
Common ways hackers get in
Outdated plugins
Weak passwords
The 'admin' username
Vulnerable themes
Exposed login page
Brute-force attacks
Spam through forms
Unsafe server settings
We close each of these routes as part of our security plans.
What's included
What our WordPress security service includes
From the first audit to daily scans and malware removal. The label on each item shows when it applies.
Day one
Security audit
A vulnerability scan and deep malware scan of your website, so we start with a clean slate.
From Secure
Security software, configured
Premium security software installed and set up properly, not left on default settings.
From Secure
Server hardening
An extra protection layer at hosting level and in your .htaccess file, on top of your security plugin.
From Secure
Firewall
Blocks bots, brute-force attempts and malicious traffic before it reaches your website.
From Secure
Login security
Two-factor authentication, a custom login page, no 'admin' username and strong passwords.
From Secure
Theme security
We fix known weaknesses in your theme, or advise a more secure alternative.
From Secure
Daily security scans
Your website is scanned every day for malware and suspicious changes.
From Secure
Form & spam protection
Anti-spam measures on your contact forms, so only real leads come through.
From Secure
Malware removal
If something does get in, we remove it and close the gap it came through.
From Secure
Database protection
A protected, clean database without spam, old revisions and clutter.
All plans
Offsite backups
Up to 4 backups a day, stored externally, so we can always restore your website.
All plans
Weekly updates
Core, plugins and theme updated by hand, closing security holes before they're exploited.
Our approach
Security in layers
Every layer stops a different kind of attack. Together they make your WordPress website a hard target, and if something still goes wrong, the backups are your safety net.
1
Server & hosting
Hardened server settings and an extra layer at hosting level.
2
Firewall
Malicious traffic and bots are blocked before they reach WordPress.
3
WordPress software
Core, plugins and theme kept up to date and scanned every day.
4
Login & users
Two-factor authentication, strong passwords and no default usernames.
5
Backups
Daily offsite backups: the safety net if all else fails.
Already hacked?
Website hacked? We clean it up
If your WordPress website has been hacked, act fast: hackers can steal data, send spam from your site or get it blacklisted by Google. Our hack removal service cleans your website completely and makes sure it stays clean.
- Full malware and hack removal
- Scan for corrupted and infected files
- The security gaps that let hackers in, closed
- 3 months of security monitoring afterwards, worth €348
One-off service
WordPress Hack Removal
€500
Fixed price, no subscription needed.
Get Hack RemovalNot hacked, but something's broken? Quick Support starts at €97.
Security plans
Security is included from the Secure plan
Every plan includes weekly updates, daily offsite backups and 24/7 monitoring. Security software, the firewall, daily scans and malware removal start with the Secure plan.
Secure
Maintenance plus security
€122.96
per month, or save 16% yearly
- Security software and firewall
- Daily scans and malware removal
- 2 backups a day
- 1 hour of website edits per month
Most popular
Performance
Security plus speed
€186.56
per month, or save 16% yearly
- Everything in Secure
- Speed optimisation and WebP images
- AI support and WooCommerce help
- 4 backups a day
- 2 hours of website edits per month
Ultimate
For business-critical sites
€313.76
per month, or save 16% yearly
- Everything in Performance
- Priority support, usually within the hour
- Staging site to test updates first
- 4 hours of website edits per month
What do WordPress security services include?
Our WordPress security service starts with a security audit and includes configured security software, server hardening, a firewall, login security with two-factor authentication, theme security, daily security scans, form and spam protection, malware removal and database protection. Every plan also includes weekly updates and daily offsite backups.
Isn't a security plugin enough?
No. A security plugin is one layer of protection, and its default settings leave several gaps. Real WordPress security also needs a hardened login, secure server settings, a firewall, timely updates, regular scans and offsite backups.
Which plans include security?
Security software, the firewall, daily scans and malware removal are included in the Secure plan (from €122.96 per month), the Performance plan and the Ultimate plan. The Supporter plan includes weekly updates, daily offsite backups and 24/7 monitoring, but no security software or malware removal.
My website has been hacked. What should I do?
Contact us right away. Our WordPress Hack Removal service (€500, one-off) removes the hack and malware, scans for corrupted files, closes the security gaps and includes 3 months of security monitoring afterwards.
Do you use two-factor authentication?
Yes. We recommend two-factor authentication for WordPress logins, combined with a custom login page, strong passwords and no default 'admin' username.
How often do you scan my website?
From the Secure plan, we scan your website every day for malware and suspicious changes. On every plan we also monitor your website's uptime 24/7.
Do you secure WooCommerce shops and membership sites?
Yes. We secure all types of WordPress websites, including WooCommerce webshops, membership sites and sites with payment integrations.
How fast do you respond to a security issue?
A real person responds to every support ticket within 2 hours. On the Ultimate plan we usually respond within the hour.
Make your WordPress website a hard target
Book a free call and we'll look at your website's security together, with no obligation.