Security included

Security layers that are already in place when you arrive

None is paid separately and none is “coming soon”. Isolation between accounts, SSL, encrypted off-server backups, Cloudflare in front, malware scanning and login protection.

See plans See the panel

Included in every plan
Managed from the panel
Fifteen-day backups

In numbers

Backups: 1 a day · 15 days
SSL: Per domain, auto-renewed
Open ports: 22, 80 and 443
Isolation: CageFS per account

From the hosting server, measured. The ports: SSH/SFTP, web and secure web only; nothing else on the internet.

The layers, from the outside in

Cloudflare in front

With the proxy enabled from the panel: web application firewall, anti-bot protection and blocking by country or IP address. Your server is no longer directly exposed.
Server firewall

Only ports 22, 80 and 443 open to the internet. Admin panels and the database aren't visible from outside. Repeated SSH and SFTP attempts are blocked.
Isolation between accounts

CloudLinux with CageFS: each account sees only its files and processes. A compromised site doesn't reach the others.
SSL and forced HTTPS

Certificate per domain, issued and renewed automatically. Force HTTPS with a switch and use your own certificate if you prefer.
Login protection

Repeated attempts against wp-login are blocked. And if you lose access, change the admin password from the panel.
Malware scanning

ClamAV over your live site, when you request it from the panel, and over the backups. If it finds something, it tells you with the path.
Folders with user and password

Protect a real folder of the site (say /downloads/) by requiring credentials before entering.
Encrypted off-server backups

One a day, fifteen days, with restic, in separate storage. Restore the whole site or individual files from the panel.
Monitoring included (Zygore Pulse)

Every site is checked from outside. If it goes down, you see it in your panel as an alert.

What we do and what you do

Zygore

The server: system, patches, firewall, isolation.
Backups and their encryption, and that they restore.
SSL and its renewal.
Monitoring your sites (Zygore Pulse), which you see in your panel.
The panel tools: scanning, blocking, login protection.

You

Strong passwords in WordPress and the panel.
Updating WordPress, plugins and themes (the panel does it with backup and rollback).
Installing only the plugins you need, from known sources.
Turning on the Cloudflare proxy when you connect the domain.
Checking the malware scan if something smells off.

Frequently asked questions

Can my site still get infected?

Yes. Most infections come in through an old plugin or a weak password, and that's on your side. What we do is keep the infection from leaving your account, let you detect it with the scan and let you go back to a clean day with the backups.

What exactly is the Cloudflare thing?

You connect your domain to Cloudflare from the panel and turn on the proxy. From then on traffic goes through their network: web application firewall, anti-bot and whatever country or IP blocking rules you set. Without the proxy, rules filter nothing; the panel warns you.

Are backups encrypted?

Yes, with restic, and they're stored off the hosting server, in object storage. Fifteen days of retention.

Do you scan the site every night?

The live-site scan is something you launch from the panel when you want. Backups are scanned. If that changes, we'll say so here, not before.

Is there a guarantee against hacks?

No. Nobody can honestly guarantee that. There are layers, backups and tools, and a person to write to.

Security layers that are already in place when you arrive

The layers, from the outside in

Cloudflare in front

Server firewall

Isolation between accounts

SSL and forced HTTPS

Login protection

Malware scanning

Folders with user and password

Encrypted off-server backups

Monitoring included (Zygore Pulse)

What we do and what you do

Frequently asked questions

Your site, on a server that looks after itself