Security is a set of habits we keep on a schedule

We keep sites secure with current software, controlled access, tested backups and encrypted traffic, with someone watching the logs.

Start a project

Patch cables plugged into network switch ports with amber status lights

How business sites get breached

Most business sites get compromised through unpatched software and logins that should have been closed, like a shared password or an admin account for someone who left.

Those doors can be closed, and keeping them closed is routine work for someone accountable. Nobody can promise a site will never be breached, so we commit to the practice and to a fast, clear response.

Dawnbrook Community Church

Handwritten connect cards become person records, and a note marked private goes to the pastor’s confidential care lane. Dawnbrook is a company we invented, so we could build its website and back office in full.

Open the Dawnbrook build

The practice

What we keep up on every site we look after.

Updates
Platform and plugin updates applied on a schedule, because out-of-date software is the most common way in.
Access control
An account for each person, permissions that match their role, two-factor on anything that matters, and access removed the day someone leaves.
Backups
Kept apart from the site and proven by restoring them on a schedule.
Encryption
SSL on every site we run, renewed without anyone having to think about it.
Monitoring
Logs and uptime watched for the unusual, like login attempts that don’t fit or files that changed when nothing was deployed.

Hands scrolling a product page on a phone

When regulations apply

Clinics and financial practices under HIPAA or similar rules need security scoped to those obligations, sometimes with specialist auditors alongside us. That conversation belongs in discovery, and we’ll tell you when this practice isn’t enough on its own.

Questions

What happens if a site is compromised anyway?

We isolate it, restore from a clean backup, find how the attacker got in and close that path. Then you get a clear account of what happened and what was affected.