Protect your website and your business

Yes, every website is a potential target regardless of size or industry. Automated bots constantly scan the internet for websites with known vulnerabilities, and they do not discriminate between large corporations and small New Zealand businesses. Sophos Labs research put the figure at over 30,000 websites compromised globally every day (a number that is now over a decade old but still widely cited), and small business sites are often easier targets because they are less likely to have professional security measures in place. Proactive security is not optional; it is essential for protecting your business and your customers.

We create multiple layers of protection including a web application firewall to block malicious traffic, regular malware scanning to detect threats, security hardening to reduce your attack surface, two-factor authentication for admin access, regular software updates to patch known vulnerabilities, and 24/7 monitoring for suspicious activity. Each layer catches different types of threats, and together they provide comprehensive protection that handles the vast majority of attacks automatically without requiring any action from you.

We perform daily backups of both your website files and database, stored securely off-site in a separate location from your hosting server. We retain 90 days of backup history, giving you the flexibility to restore from any point within the past three months. This is important because some compromises go undetected for days or weeks, and you need the option to restore from a backup that pre-dates the breach. We also verify backup integrity regularly to ensure restores will work when needed.

We follow a structured incident response process: first, we isolate the compromised site to prevent further damage. Then we restore from the most recent clean backup, identify exactly how the breach occurred, patch the vulnerability that was exploited, and scan thoroughly to ensure no malware remnants remain. Finally, we implement additional security measures to prevent the same type of attack from succeeding again. Our target is to have your site cleaned and restored within 24 hours of discovering a breach.

Our security packages are tiered based on the level of protection and monitoring your site needs. Basic security covering firewall, malware scanning, and daily backups is included in our hosting and maintenance plans. Enhanced security packages add features like real-time monitoring, vulnerability scanning, and priority incident response. The cost of professional security is a fraction of what a breach would cost in lost revenue, customer trust damage, and emergency remediation fees. For New Zealand businesses, it is one of the most sensible investments you can make.

While we are not legal advisors, we implement the technical security measures that support your obligations under New Zealand Privacy Act 2020. This includes encrypting data in transit with SSL certificates, securing stored customer information, implementing access controls, and maintaining proper backup procedures. If your website collects personal information through forms, ecommerce transactions, or user accounts, these technical measures help you demonstrate that you are taking reasonable steps to protect that data as required by the Act.

A web application firewall (WAF) sits between your website and the internet, filtering out malicious traffic before it reaches your site. It blocks common attacks like SQL injection, cross-site scripting, and brute force login attempts automatically. For any business website, especially those that collect customer data or process transactions, a WAF provides an essential first line of defence. We include WAF protection as a standard part of our security packages because it prevents a large percentage of attacks from ever reaching your website.

Signs of compromise include unexpected redirects to other websites, new admin users you did not create, unfamiliar files or code in your site, Google warnings about your site being unsafe, sudden drops in search rankings, or customer reports of suspicious behaviour. However, many compromises are designed to be invisible so they can operate undetected for as long as possible. If you suspect your site may be compromised, we offer security audits that scan your site thoroughly and identify any existing threats, giving you a clear picture of your site current security status.

Yes. We clean and restore hacked or broken sites, and fix the quieter damage too, like missing redirects, forms that stopped sending, and tracking lost in a rebuild. Our website recovery service covers how we get a site working again.