Website security requires software, hosting, access and business processes to be managed together. We define technical responsibilities clearly at the start of the project.
Access and permissions
We limit user roles to the permissions required. Responsibility for administrator accounts and provider access is assigned. Confidential information is not shared through public contact forms.
Updates and recovery
WordPress, theme and plugin maintenance is planned alongside backup and restore responsibilities. Hosting and external service security capabilities depend on their providers.
Incident reporting and communication
If you notice something suspicious, send the relevant URL, approximate time and observations without personal data through our contact channel. Review and response follow your service scope. Technical measures are defined according to the project and service scope.
