Website Security

A maintenance checklist should cover the site's actual business functions alongside updates, access, backups and renewals. Assign owners, record exceptions and escalate incidents outside...

Managed SSL can reduce some certificate-operation work when its scope and platform eligibility fit the website. Verify who handles installation, validation, renewal and monitoring....

A security handover should identify asset ownership, named access, maintenance, backups and incident contacts. Confirm the recipient can operate the recovery process and remove...

Website login protection should use appropriate named access, available multifactor controls and sensible recovery. Review permissions and obsolete users, and consider supported rate limits...

Before installing a plugin, review its legitimate source, current maintenance, compatibility and purpose. Test away from production where practical and remove unused components. Consider...

Verify an unexpected renewal or hosting invoice through the known provider account and established contact route. A familiar logo or urgent deadline is not...

Certificate verification should inspect the live public connection, not only an account's installation message. Check hostname coverage, validity and the route through any proxy...

An old backup can overwrite new orders if production data is replaced indiscriminately. Validate recovery separately, identify newer transactions and choose a method suited...

Avoid certificate-expiry interruption by assigning renewal ownership and checking the live connection after renewal. Monitor the relevant hostnames and validation dependencies. Automation can fail...

Form protection should combine maintained code, validation and appropriate abuse controls with usability. Test mobile and keyboard access, notification delivery and invalid input handling....