How to protect a company website from being hacked
The biggest risk to an ordinary company website is out of date plugins, weak passwords and the lack of a tested backup, not a sophisticated attack aimed at your firm.
The vast majority of break ins are the work of a bot scanning the internet for known holes in popular plugins. Nobody picks you personally. The conclusion is simple: regular updates, two step login to the admin panel and a limited number of administrator accounts take care of most of the problem.
The second layer is backups kept off the site server and tested for restoring. A backup nobody has ever restored is a file, not a safeguard. You check it once, at launch, and then sleep soundly.
A site with no admin panel and no database simply has nothing to attack in the classic way. That is why for brochure and company sites we increasingly choose exactly that architecture, and add a panel where somebody genuinely publishes content every day.
Related topics
Question not covered here?
Write to us, we answer concretely and with no strings attached.