Website Security & Hacked Websites

Last updated October 25, 2026. For existing clients, these terms take effect with your next renewal.

No website is impossible to break into. This page explains what we do to keep your website safe, what you can do, and what happens, and what it costs, if your website is hacked.

1. What We Do for Every Website

For every website we host, we:

• keep our server's security protections in place and up to date
• back up your website as described in our Backup Policy
• check WordPress websites regularly against a database of known security problems in plugins, themes, and WordPress itself
• watch your website's security certificate and domain settings for unexpected changes

If we find a serious security problem on your website, we'll let you know.

2. What Managed Services Adds

Managed Services websites also receive WordPress, theme, and plugin updates, including urgent security fixes as soon as reasonably possible, plus regular review, as described in our Managed Services Agreement. Keeping software up to date is the single most important thing that keeps a website from being hacked.

Standard Hosting does not include updates. Out-of-date software is the most common way websites get hacked.

3. What You Can Do

• Use a strong, unique password for every login, and never share it.
• Only give logins to people who need them, and tell us when someone leaves.
• Don't install plugins or themes without checking with us first.
• Keep your paid plugin licenses active (see our Third-Party Software & Plugins Policy).
• Tell us right away if something on your website looks wrong.

4. If Your Website Is Hacked

If a website is hacked, we act quickly to protect it and everyone else on our server. That may mean taking the website offline temporarily, without notice, if it's sending spam, spreading harmful code, or putting other websites at risk. We'll contact you as soon as reasonably possible.

Our usual fix is to restore the website from a clean backup taken before the hack, then close the hole that let the attacker in. Anything added or changed on your website after that backup may need to be redone.

5. What It Costs

Managed Services: Restoring your website from a clean backup and securing it is included, unless the hack was caused by:

• a plugin, theme, or code that we didn't provide or approve
• changes made by you, your staff, or anyone you gave access to
• a password that was shared, reused, or stolen from your side
• a paid plugin whose license you let lapse after we told you it needed renewing

In those cases, cleanup is billed at our technical recovery rate of $195 per hour.

Standard Hosting: Cleaning up a hacked website, including any restore, is billed at our technical recovery rate of $195 per hour. We'll give you an estimate before we start, unless the website has to be taken offline right away to protect our server.

6. What We Can't Promise

We can't guarantee that any website will never be hacked, or that every attack will be caught. A clean backup may not exist if the problem went unnoticed long enough. Our responsibility and liability are limited as described in our Terms of Service and Backup Policy.