An insecure website loses customers, Google rankings and sometimes data that cannot be recovered. At despegia we apply several layers of protection that work together: SSL certificate, web application firewall, WordPress and server hardening, access control and off-server backups.
We also watch your website and server continuously: availability, response time, certificates, disk space and attack attempts. If something fails, we get an alert and act before your customers notice.
If your website has already been attacked, we clean it, close the security hole and return it to a healthy state. Combined with a well-configured server and proper WordPress maintenance, the risk drops dramatically.
In depth
How we protect your website, step by step
The most common threats
Most attacks are automated: bots that try passwords, look for outdated plugins or attempt to inject code. Size does not matter; any vulnerable site can end up sending spam, redirecting visitors elsewhere or losing data.
Layers of protection
We combine SSL with security headers, an application firewall, login-attempt limits, two-factor authentication and correct file permissions. Each layer reduces risk, and together they stop the vast majority of attacks.
Monitoring and alerts
We watch uptime, response time, certificate expiry, resource usage and suspicious logins. When a sensor detects an anomaly we are alerted immediately and act before your customers notice.
Backups that actually work
A backup is only useful if it can be restored. We store automatic backups off the server, keep several versions and regularly test restores, so you can roll back within minutes after any incident.
What is included
Protection at every layer
SSL and HTTPS
Certificates installed, renewed and configured with security headers.
Firewall
Blocks bots, brute force and injections before they reach your website.
24/7 monitoring
Availability, performance, SSL and resource sensors with instant alerts.
Backups
Automatic, restorable backups stored in another location.
Malware removal
Detection and removal of malicious code and closing of vulnerabilities.
Updates
WordPress, themes and plugins kept up to date and tested before applying.
How we work
Our security plan
Audit
We review your website, server and access to detect risks.
Hardening
We apply SSL, firewall, correct permissions and secure authentication.
Monitoring
We switch on monitoring sensors and automatic backups.
Response
If anything happens, we act and tell you exactly what occurred.
FAQ
Questions we are often asked
Is my website too small to be attacked?
No. Most attacks are automated and look for any vulnerable website, whatever its size.
What if my website is already hacked?
We analyse it, remove the malware, close the vulnerability and restore what is needed from a clean backup.
How often are backups made?
Daily by default, with several versions kept so you can return to a specific point.
What exactly is monitored?
Availability, response time, SSL certificate, server resources and suspicious login attempts.
Want to know how secure your website is?
We run an initial review and explain the risks in plain language.
We use our own and third-party cookies to analyse traffic and improve your experience. You can accept or reject them, or read more in our Cookie policy
