Server and file hardening
Permissions are locked down, security headers are set, and weak points like XML-RPC are switched off unless the site needs them.
Maku partner
Maku. WordPress and WooCommerce hosting, kept fast and secure.
Maku is an Australian WordPress development and hosting company. The same team builds, hosts, secures and repairs WordPress sites and WooCommerce stores, and looks after them once they are live.
Hosting built for WordPress, not for everything.
Most hosting is built to run anything. Caching is basic, and support often knows little about WordPress. Maku runs its own hosting environment, sold under its Skyrack brand, and tunes it for WordPress.
Maku has hosted WordPress for more than 15 years and runs more than 900 sites on its own servers. Support comes from the developers who build WordPress sites, not a generic ticket desk.
Maku also hosts static sites, Joomla sites and other e-commerce stores, not only WordPress.
-
LiteSpeed web server and cache
Pages load fast without a stack of caching plugins.
-
CloudLinux account isolation
Each account is kept apart, so one site cannot affect another.
-
Imunify360 security
A firewall, malware detection and proactive defence on every plan.
-
Hourly backups
Backups run every hour, and on-demand backups are there when you need one.
-
Full cPanel access
Manage email, databases, files and installs from one familiar screen.
-
Free migration and no lock-in
Maku moves your site across, and hosting runs month to month with 30 days' notice.
WordPress security that runs every month.
Most break-ins come through old plugins, weak passwords or themes nobody has touched in years, not through WordPress itself. Maku's security service hardens a healthy site and keeps it that way.
Login protection and 2FA
Login attempts are rate limited, and every admin account signs in with two-factor authentication.
Web application firewall
A firewall in front of the site filters known attack patterns before they reach your code.
Malware and flaw scanning
Regular file scans, plus watching for newly disclosed flaws in the exact plugins and themes you run.
Patching within a set window
Critical flaws are patched, or the plugin is switched off, within an agreed window rather than at the next review.
Tested backups and a plan
Backups are proven by restoring them, changes are logged, and a plan is ready if something still gets through.
Maku runs the WordPress platform. Vectra covers the wider security program.
Maku builds, hosts and hardens the site. Vectra adds penetration testing, PCI DSS compliance and incident response around it.
If a site is hacked, a proper clean-up.
Don't delete files or restore an old backup over a hacked site. Both destroy the evidence of how the attacker got in. Maku looks at the site and quotes a fixed price before any paid work starts.
Isolate
Limit what the attacker can still reach while the investigation runs.
Scan and review
Automated scans catch known malware, and people read the code by hand for what scanners miss.
Clean
Core files, themes, plugins, uploads and the database are checked wherever an infection could hide.
Remove backdoors
Hidden ways back in, and admin accounts nobody created, are found and removed.
Rotate credentials
WordPress, database, hosting and FTP logins and API keys are all replaced.
Patch and report
The entry point is closed, and a plain-English report explains how it happened.
Why work with Maku.
-
Maku is 100% Aboriginal owned and operated, and was founded by a Ngarrindjeri person.
-
Maku has more than 15 years of WordPress hosting and development behind it.
-
More than 900 WordPress sites run on Maku's own servers.
-
You deal directly with the engineers who build and host your site.
-
There is no lock-in contract, and you keep your code, content and domain if you leave.
Related Vectra services.
Penetration Testing
CREST-certified testing of your website, store and the systems behind them.
PCI DSS Consulting & Compliance
PCI DSS assessments and advice for businesses that take card payments online.
Vulnerability Scanning
Quarterly PCI DSS ASV scans and risk-based vulnerability management.
Incident Response
Australian-led response when an attack reaches beyond the website.
Start with a conversation.
Speak to us about your cyber governance and compliance requirements.