Definitive WebHost

Security

Defended before it reaches you

Attacks are filtered upstream, at the edge, on infrastructure built to absorb them — not by a plugin running inside your website.

Enterprise anti-DDoS

Volumetric attacks are absorbed and scrubbed at the network edge, long before they reach the servers your site runs on.

Web application firewall

Rules that block injection, cross-site scripting and the exploit patterns aimed at WordPress, Magento and Laravel, updated centrally by us.

Malware scanning

Files are scanned automatically and flagged in the Control Panel, with Timeline Backups on hand to roll a compromised site back to a clean state.

Access control

Two-factor authentication, brute-force protection, FTP lock and scoped team permissions, so a contractor's account is not a way into everything.

Isolation by role

Web, database, FTP, mail, panel and storage run on separate infrastructure, so a compromise in one place does not become a compromise everywhere.

Recoverable by design

Daily backups on every plan, Timeline Backups on Premium and Enterprise, all stored offsite. Security is only as good as the restore behind it.

Where a request gets stopped

Each layer removes traffic the next one should never see. By the time a request reaches your application, it has been through scrubbing, firewall rules, bot checks and rate limits.

Edge scrubbing · volumetric attacks dropped

Web application firewall · exploit patterns blocked

Anti-bot checks and rate limiting challenged

Your application real visitors

Security questions

Do I still need a security plugin?

Most of what those plugins do — firewalling, rate limiting, malware scanning — already happens above your site, and doing it twice costs performance. Keep the ones that add application features you use; drop the rest.

What happens if my site is compromised?

Support will help you isolate it, restore from a clean point and work out how it got in. On Premium and Enterprise, Timeline Backups usually make the restore a matter of minutes.

Is SSL included?

Yes, on every domain and subdomain, issued and renewed automatically at no cost.

Worried about something specific?

Tell us what you are protecting and we will tell you how we would do it.