CYBERSECURITY & WEBSITE MAINTENANCE
Stronger security for your website and server.
Outdated software, unsupported plugins and overlooked server settings can leave your website exposed. We help you identify the gaps, plan the work and put practical security measures in place.
From PHP and WordPress upgrades to CDN configuration and custom monitoring, you work directly with the developers looking after your website.
How we can help
01 / Server software updates
Keep the software behind your website supported and patched. We review your server environment, identify outdated components and coordinate updates with your hosting provider or carry them out on servers we manage.
- PHP upgrades and security patches, including compatibility checks for your website and its dependencies.
- Operating system, web server and database updates within the agreed maintenance scope.
- Backups, staging tests and a rollback plan before production changes.
- Post-update checks of key pages, forms, scheduled tasks and checkout flows where applicable.
Recent example: critical PHP vulnerabilities
On 21 October 2026, PHP released security updates addressing CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that can allow unauthenticated remote code execution. We can check your hosting environment and help move your website to a supported PHP release with the relevant security fixes.
02 / WordPress migration to a supported PHP version
A PHP upgrade can expose compatibility issues in older WordPress code. We handle the migration together with the plugin, theme and custom code changes needed to keep your website working.
- WordPress core, plugin and theme upgrades, tested against the target PHP version.
- Replacement or migration of abandoned plugins and themes to maintained alternatives.
- Compatibility updates and targeted security fixes for legacy or custom code where continued maintenance is feasible.
- Removal of unused components and checks of the features your team and visitors rely on.
03 / CDN configuration & security measures
We configure your CDN and website security settings around how your site actually works, including its forms, integrations and administration area.
- CDN setup, DNS configuration and HTTPS settings between visitors, the CDN and your origin server.
- Web application firewall rules, rate limiting and bot protection where supported by your provider and plan.
- Cache rules that keep login pages, administration areas, shopping carts and private content out of shared caches.
- Security header configuration, with compatibility testing for third-party scripts, embeds and services.
Security headers configured for your website
- Strict-Transport-Security (HSTS) — tell browsers to use HTTPS for future visits, with subdomain coverage and preload readiness assessed against your domain setup.
- Content-Security-Policy (CSP) — define permitted sources for scripts, styles, images, fonts, connections and embedded content, and upgrade eligible insecure resource requests to HTTPS.
- X-Frame-Options — restrict framing of your pages to the same origin to help prevent clickjacking.
- X-Content-Type-Options — disable MIME type sniffing so browsers respect declared content types.
- Referrer-Policy — limit information shared with other websites, using policies such as strict-origin-when-cross-origin.
- Cross-Origin-Opener-Policy (COOP) — control interactions between browser windows, with settings tested against login and payment popups.
- Permissions-Policy — restrict access to browser features such as location, camera, microphone, sensors, MIDI, fullscreen and payment APIs according to the site’s needs and browser support.
- Legacy header review — assess existing settings such as X-XSS-Protection and outdated policy directives, and update them as part of the security configuration.
We tailor these policies to your website and test key integrations before rollout. CSP restrictions are introduced with compatibility checks, including a review of inline scripts and eval-based code.
04 / Server monitoring with custom-built tools
We build monitoring tools tailored to your website and server, helping you spot downtime and unexpected activity and investigate what needs attention.
- Uptime and availability checks, including response times and selected application endpoints.
- Alerts for failed checks, recurring errors and unusual patterns in server or application logs.
- Monitoring for unexpected file changes, unfamiliar processes or resource spikes, depending on available server access.
- Notifications and reporting adapted to your team’s workflow, with agreed thresholds and follow-up responsibilities.
Start with the gaps that matter most.
Tell us about your website, hosting and current concerns. We will review the setup, agree priorities and propose a scope for a one-off upgrade or ongoing technical support.