Website Security

Security monitoring and ongoing protection

Threats caught early. On the sites we manage, Guardian Shield Lite continuously checks for new code, changed files, new administrators and known malware, and alerts a person who can act, instead of filling an inbox nobody reads.

Book a free call See our work Fixed quote after a free call

What you get

  • New code
  • File changes
  • Accounts
  • Known malware
  • Uptime
  • Alerts

Sound familiar?

  • You only learn about a hack when customers or Google tell you.
  • Security plugin emails arrive by the hundred, so nobody reads them.
  • Nobody would notice a new administrator account.
  • You manage several sites and cannot check them all.

Who it helps

  • Business sites and stores

    Someone watching the site, so problems are caught early.

  • Sites that were hacked before

    Repeat attempts spotted before they do damage.

  • Owners of several sites

    Every site reporting to one place.

What is included

  • New code New plugins, themes and code files need approval before they can run
  • File changes Changes to core, theme and sensitive files detected
  • Accounts New or promoted administrators blocked or flagged
  • Known malware Files and database checked against known malware signatures, updated centrally
  • Uptime Front pages checked, so a site that goes down or shows an error is noticed
  • Alerts Important alerts to a person straight away; routine events in a daily digest

Not included

  • Monitoring of email, office computers or other servers
  • A guarantee that no attack will ever succeed

Monitoring that a person acts on

Monitoring is only useful if someone reads the alerts and knows what to do. Many site owners get so many security emails that they stop opening them. Guardian Shield Lite sends the important ones straight away and collects routine events into a daily digest, and every alert reaches our team, not only an inbox.

New code needs approval

Most monitoring tools look for known malware after it arrives. Guardian also requires new code to be approved before it can run, which catches attacks that no signature list knows yet, and it watches for the hidden administrator accounts and scheduled tasks attackers use to get back in.

One hub for every site

Every protected site reports to one central hub, which also checks that each front page is up and not showing an error. Malware signature updates are published once and picked up by every site.

How it works

  1. Free call

    We look at the site and how it is hosted.

  2. Install and baseline

    Guardian Shield Lite installed, and the site's current state recorded as trusted after a check.

    From you: Admin access.
  3. Watch

    Checks run continuously and report to our hub.

  4. Act

    When something needs attention we look at it, then fix it or tell you what it means.

  5. Review

    Regular summaries of what was blocked and what changed.

What affects the price

Every project gets a fixed quote after a free call, so you know the total before anything starts. These are the things that move it.

  • Number of sites
  • Size of the site and how often it changes
  • Response included: alerts only, or fixes too
  • Whether maintenance is included

Where we have done this

In Order to Succeed
  • Service business
  • WordPress
  • Website security

Hidden admin powers, a fake Cloudflare redirect and a backdoor, removed by Guardian

Challenge
Customer accounts had been given administrator powers in secret, a script sent visitors to a fake Cloudflare check page, and a backdoor was hidden in a theme file.
Result
All three threats removed automatically. The backdoor, planted in November 2025, was found and removed on 9 September 2026 during a regular scan.
WordPress security plugin

Guardian Shield Lite

Our WordPress security plugin: code stays locked, known malware is removed with evidence kept, and every site reports to one hub.

  • Code locked, changes in recorded windows
  • Known malware removed, evidence kept
  • Every site watched from one hub

Questions about security monitoring and ongoing protection.

What is Guardian Shield Lite?

It is the security plugin we built and run on the sites we manage. It is not sold separately; it comes with our security and maintenance services.

Will I get lots of alert emails?

No. Important alerts go to our team straight away, and routine events are summarized once a day.

What happens when something is found?

Known malware is removed with evidence kept, suspicious changes are blocked or flagged, and our team checks what happened and tells you what it means.

Does monitoring slow down my site?

The checks run in the background in small batches, so visitors do not notice them.

Can you monitor a site that is not on WordPress?

Guardian is built for WordPress. For other platforms we can set up uptime and change monitoring with other tools.

Tell us your goal. We'll show you the plan.

Book a free 30-minute call. You'll leave with a clear plan and a fixed quote, whether you hire us or not.

Book my free call
Free call, no obligationBook my call