WORDPRESS WEBSITE SECURITY
Understand the risks. Protect the website your business relies on.
Get a clear view of your WordPress security, strengthen the parts that need attention and find a practical route forward if your website has been compromised.
You work directly with me, Michael. I separate assessment, preventative improvements and incident cleanup, so you can choose the right service and understand what the work includes.
- Security review from £149
- Hacked-site cleanup from £249
- UK company · projects worldwide
Michael
Owner, designer & developer · Your direct point of contact
Platforms and tools selected for your project.
KNOW WHAT NEEDS ATTENTION
An unfamiliar change is worth investigating.
A security concern can be obvious or subtle. Tell me what changed and when you noticed it; you do not need to diagnose the cause yourself.
Unexpected content or redirects
Visitors are sent to another website, unfamiliar links appear, or pages and search results show content your business did not publish.
Warnings or lost access
Your host or browser reports a problem, the site is suspended, or an account or password has changed unexpectedly.
A site that needs a security review
The website is working, but software, account access, backups or security settings have not been reviewed for some time.
These signs justify a closer look; they do not establish the cause on their own. I review the evidence before recommending the work.
A LAYERED APPROACH
Review the website and the access around it.
For WordPress and WooCommerce, I consider the components that affect day-to-day exposure and recovery. The exact review depends on the agreed access and site setup.
WordPress, plugins & themes
Check versions, available updates, unsupported components and relevant known vulnerabilities. Identify software that needs updating, replacing or further investigation.
Accounts & login protection
Review administrator access, roles and login controls. Recommend practical improvements such as stronger credentials, appropriate permissions and two-factor authentication.
Files & suspicious changes
Review available file-integrity and malware findings, unfamiliar users and reported behaviour. A scan informs the investigation and is checked in context.
Firewall & configuration
Review relevant WordPress and hosting controls, HTTPS and permissions. Scope any hardening changes around legitimate website features and integrations.
Backups & recovery
Check the existing backup schedule, storage and available recovery points. Discuss whether a restore test or a separate recovery plan is needed.
Clear priorities
Receive a readable account of what was checked, the issues identified and the recommended next steps, with additional work quoted before it begins.
Match security work to the condition of your website
An assessment, preventative improvements and incident cleanup have different purposes. I first discuss the condition of the website and the access available, then agree which checks or changes belong in the work and which findings may need a separate response.
- Review scope and access confirmed before work begins.
- Agreed safeguards considered alongside software, accounts and backup arrangements.
- Incident investigation and cleanup defined separately where required.
CHOOSE THE RIGHT STARTING POINT
Assessment, hardening and cleanup have different jobs.
The fixed fees below apply to the stated scope for one standard WordPress installation. I confirm suitability before booking. Complex stores, multisite and server-wide incidents are assessed separately.
Security Review
For a working website that needs a clear assessment.
£149
One-off · total service fee · no VAT added
- One WordPress installation
- Software, account and configuration review
- Available malware and file-integrity checks
- Review of existing backup arrangements
- Written findings and prioritised recommendations
- Assessment and reporting; remediation quoted separately
Security Hardening
An agreed set of preventative improvements.
Quoted
Fixed project quote after reviewing the requirements
- Scope based on your setup or audit findings
- Account, login and permissions improvements
- Appropriate firewall and security configuration
- Agreed software changes and functional checks
- Record of changes and remaining recommendations
- Cleanup of an existing infection priced separately
Hacked-site Cleanup
Initial investigation and cleanup for a confirmed incident.
£249
One-off · initial scope up to 3 hours · no VAT added
- One standard WordPress site and one incident
- Investigation of the reported compromise
- Removal of identified malicious code within scope
- Relevant account and entry-point checks
- Post-clean checks and a summary of findings
- Additional recovery or server work quoted if needed
All prices are total service fees in GBP. No VAT is added. Hosting, paid security licences and third-party provider fees are separate unless expressly included. I confirm the work, access, recovery arrangements and likely limitations before starting.
The £249 cleanup fee covers up to three hours of initial incident work. Extensive infections, rebuilding, unavailable clean source files or a compromised hosting account may need an additional approved quote.
A CLEAR PROCESS
From the first concern to a documented next step.
01
Understand the situation
Tell me the website address, symptoms and recent changes. I establish the available WordPress and hosting access and confirm the suitable service.
02
Agree the work
I define the scope, price, access method and recovery precautions. Incident cleanup and planned preventative work are scoped according to the situation.
03
Investigate & act
I carry out the assessment or agreed changes, record relevant findings and explain any additional work needed before proceeding beyond the scope.
04
Check & hand over
I check the affected website functions, explain the outcome and document remaining risks or actions, including optional ongoing maintenance.
UK EXPERIENCE. INTERNATIONAL PROJECTS.
Technical care with someone you can speak to.
I'm Michael, the sole owner of Creative Apple Solutions Ltd. I personally plan and deliver each project, drawing on website design and development experience built since 2001. I hold engineering and master's degrees in computing, both completed with distinction, and I primarily live and work in the UK.
I work with businesses worldwide, including Ireland, Germany, the Netherlands, Thailand, the USA and Poland. I agree communication, remote access and review arrangements directly with you.
Creative Apple Solutions Ltd · Active UK company · Company number 12417645. Security work reduces identified risks; no website can be guaranteed immune to future attacks.
A clear answer. A useful next step.
A few useful answers before I start. If your question is more specific, I can talk it through with you.
Creative Apple Solutions · Direct, practical advice
WEBSITE SECURITY QUESTIONS
What to know before I begin.
Does the security review include fixing the issues it finds?
The £149 review covers assessment and reporting. I can provide a separate fixed quote for hardening or remediation once the findings and requirements are clear. You can also use the report with another developer.
What does the £249 cleanup package cover?
It covers up to three hours of initial investigation and cleanup for one accepted standard WordPress site and one incident. I review the symptoms, address identified malicious changes within that scope and provide findings. If more work is needed, I explain it and seek approval for an additional quote.
Can you guarantee my website will never be hacked?
No. Updates, suitable controls, access management and usable backups reduce risk, but they cannot remove every possible threat. The handover explains what was addressed and what still needs attention.
Can you remove a browser warning or lift a hosting suspension?
I can help investigate the underlying issue and assist with the relevant review process after cleanup. The browser, search engine or hosting provider decides when to lift its warning or suspension, so that timing cannot be guaranteed.
Will you restore an old backup?
A restore is considered only after checking the available backup and discussing the effect on current content, orders and records. An infected or incomplete backup may be unsuitable. The agreed recovery approach depends on the evidence and access available.
Do you provide emergency support around the clock?
Contact me with the symptoms and I will confirm availability and the likely next step. These packages do not include a guaranteed 24-hour human response service or a fixed resolution deadline.
Can you look after the site afterwards?
Yes. My maintenance plans provide scheduled updates, backups and support within a defined scope. Incident cleanup, larger repairs and new development are separate unless expressly included in the agreed plan.
GET A CLEAR NEXT STEP
Concerned about your website's security?
Send the website address and a short description of what you are seeing. I can help you choose between a review, preventative work and incident cleanup.
Creative Apple Solutions Ltd · UK registered company 12417645 · Projects worldwide
