How we keep your website safe
A website is only as safe as the server it runs on and the way it is looked after. Here is how we keep the websites we host safe, and what you can do to help.
What we look after on the server
- Backups. Backups are taken on the server, so if something goes wrong a site can be restored without relying on a plugin.
- Security updates. We keep PHP and the server software up to date. When a serious flaw appears, such as PHP2Shell in October 2026, we act the same day.
- Firewall. Our server firewall blocks known attacks before they reach your website.
- Fast, modern hosting. Our servers run LiteSpeed, which keeps sites quick as well as secure.
What our WordPress care plans add
Hosting looks after the server. A WordPress site also needs looking after itself: its plugins, theme and settings. On our care plans we:
- keep WordPress, plugins and themes updated
- run a security plugin and check the site every month
- hide usernames from attackers and never use “admin” as a login
- monitor that the site is up
If your site is on hosting only, these jobs are yours or your developer’s. Ask us about a care plan if you would rather we handled them.
What you can do
- Use a strong, unique password for your website and email.
- Remove plugins and user accounts you no longer use.
- Tell us if something looks wrong. It is always better to check early.
Questions? Email hello@bluemonkee.com or check our service status page.
