What the Job Actually Is
Website security is harden, watch, and restore. Plugins and themes get updates. Backups get tested. Logins get limited. The site has a named owner who can bring it back if something lands.
That work often sits next to website maintenance. A dated look is not a breach. A plugin nobody has patched is. We name those jobs separately so you do not buy a rebuild when you needed a restore plan.
What Fear Copy Hides
A badge, a countdown, or a “you will be next” pitch does not tell you who holds the backups or when they were last restored. If a vendor cannot say those two things, the rest is decoration.
We do not publish a threat score, a guaranteed-safe date, or a list of attacks we stopped. We put the controls on the site and on the hosting. You should leave the first call knowing who watches, and what happens on a Tuesday if the site is down.
Security Is Not a New Brand
A harden-and-watch job does not need a new colour palette. If the sitemap still matches the offer, keep the pages and fix the stack. Read redesign or care if you are being sold a rebuild because a plugin is old.
Hosting matters. A cheap account with no restore is not a security plan. Web hosting is where the files live. Security is what you do with those files and who can get in.
What We Need From You
The live URL. Who has admin access today. Whether anyone has a backup that has been opened, not only scheduled. If you do not know, say so. That is a common brief, not a failing.
Then we say whether this is security, care, hosting, or design. You should not leave with a bundle of everything and a scare story.
