CARE & SECURITY

WordPress maintenance that keeps the site secure after launch.

Monthly maintenance for WordPress, WooCommerce and Shopify sites: updates, backups, uptime, malware scans and hardening. One site from $129 a month, with a report you can forward.

From $129/month No setup on Basic Audit from $490

What we do

Three jobs, every month.

Most hacked sites were not targeted. They were unmaintained: an old plugin, a weak login, a backup nobody tested.

Keep it running

Core, theme and plugin updates on staging first
Weekly backups, monthly restore check
Uptime, SSL and domain expiry monitoring
Broken link and error log review

Keep it clean

Malware and vulnerability scans
Login protection and admin two-factor
File permission and header checks
Abandoned plugin and theme removal

Keep you informed

One-page monthly report
What was updated, what broke, what we fixed
Security findings and what we did about them
A written escalation path, not a phone tree

Plans

Three plans, every limit written down.

Sites, hours and response times are capped. Annual billing takes two months off. We are not a 24/7 SOC and we say so.

Plan detail	Basic	Care	Store Care
Monthly price	$129	$249	$449
Sites included	1	1	1 store
Hours per month	1	2	4
Response time	2 business days	1 business day	4 business hours
Setup fee	$0	+ $99	+ $199
Updates and backups	Included	Included	Daily backups
Malware and vulnerability scan	Not included	Monthly	Weekly
Edits and small changes	Not included	Up to 2 hours	Up to 4 hours
Checkout monitoring	Not included	Not included	Included

Prices in USD per month. Overage is $150 per hour, approved in writing first. Support runs 09:00–18:00 GMT+8, Monday to Friday — evening in London, early morning in New York. Store Care is for WooCommerce and Shopify Plus; standard Shopify stores are covered by Care.

One-off work

When something is already wrong.

You do not need a monthly plan to get a site looked at. These are fixed-scope jobs with a written report.

Job	Price	Timeline
Website security audit Non-intrusive review of one site: updates, access, headers, backups, plugins, exposed files. Written findings and a fix order.	$490	3 business days
Malware clean-up Isolate, identify the entry point, clean, harden and document. Includes a search-console recovery checklist.	from $750	3–5 business days
Hacked-site response Site down or blacklisted: triage within one business day, then a written plan before work starts.	from $950	Same week
Host or platform migration Move the site without losing rankings: redirects, DNS, content, crawl check and a rollback plan.	$600	3–5 business days

If it is hacked

Four steps, in this order.

The expensive part is rarely the clean-up. It is the week of guesswork before anyone isolates the site.

Isolate

Take the site out of search and payment rotation, keep a forensic copy, and stop the spread.

→ written status in 1 business day

Find the way in

Access logs, plugin versions, changed files and admin accounts. The entry point decides the fix.

→ entry-point note

Clean and harden

Remove the payload, rotate every credential, patch the route in, and verify the site loads clean.

→ clean site + credential list

Report and monitor

What happened, what changed, what to watch for the next 30 days. Then a care plan if you want one.

→ incident report + 30-day watch

Straight answers

Questions site owners ask.

If an answer here is vague, treat that as the answer.

Ask us directly

Do you need admin access to my site?

Yes, for updates and scans — but a dedicated account, not your personal login, with two-factor enabled and revoked within 30 days of the plan ending. We do not ask for hosting passwords over email.

What if the site breaks during an update?

Updates run on a staging copy first. If staging breaks, production is untouched and we fix or roll back the staging copy. If production breaks anyway, the backup and rollback are part of the plan.

Is the site guaranteed to be secure?

No, and any vendor who promises that is selling you something they cannot deliver. We reduce the obvious ways in, keep the stack patched, and shorten the time between an incident and a fix. What we test and what we change is written down.

Can I cancel?

Month to month, 30 days' written notice. Setup fees are not refundable. You keep the site, the accounts and the documentation; nothing is held hostage.

Before you buy care