🛡️ WordPress Security & Maintenance
We keep your WordPress site patched, backed up and online, so you can get on with running your business.
WordPress runs a huge share of the websites in Chilliwack, from shops and trades to churches and non-profits. It is a great tool, but it needs regular care. When a flaw like PHP2Shell lands, attacks start within hours, and a site nobody is watching stays exposed for weeks. We look after WordPress sites the same way we look after our own: patched fast, checked for trouble, and backed up with backups we have actually restored.
Security patching
- PHP, WordPress and plugin security updates
- Fast response to critical flaws
- Settings that switch off features attackers abuse
- Login protection against password guessing
Health and malware checks
- Core and plugin files compared with official copies
- Review of admin accounts and hidden files
- Clean-up of old copies and leftover files
- Plain-language report of what we found
Backups and monitoring
- Nightly database and weekly file backups
- Backups test-restored, not just taken
- Uptime monitoring that checks every minute
- Cloudflare protection and SSL set up properly
Hosting and moves
- Move your site off an old or failing host
- Domain and DNS changes handled for you
- Speed improvements and page caching
- Or we look after it where it already lives
How it works
- Free site check. Send us your web address. We check your PHP and WordPress versions, plugins and the obvious warning signs, and tell you what we find.
- Fixed-price catch-up. If the site is behind, we quote a fixed price to back it up, bring everything current and close the gaps.
- Ongoing care, if you want it. We keep it patched, backed up and monitored, and you hear from us when something needs your attention.
Pricing
Fixed prices in Canadian dollars, plus GST and PST. You know the cost before any work starts.
Ongoing care
Care
$99/month
or $990 a year, paid annually (two months free)
On your current host. Updates, nightly backups, uptime monitoring, security alerts and a monthly report.
Care + Hosting
$149/month
or $1,490 a year, paid annually (two months free)
Everything in Care, plus hosting on our managed server with Cloudflare protection. Replaces your hosting bill.
One-time work
| Free site check | Free | We check your site from the outside and send a plain-English report. No obligation. |
| Catch-up: Light | $295 | Under a year behind and already on PHP 8. Backup, PHP and WordPress updates, plugin updates, checks. |
| Catch-up: Standard | $595 | One to three years behind, or on PHP 7.4. Includes fixing plugins and themes that break on newer PHP. |
| Catch-up: Rescue | from $995 | Three or more years behind, or abandoned plugins and themes. Firm quote after an audit. |
| Hack clean-up | $450 | Malware removal, closing the way in, new passwords. Re-cleaned free if it comes back within 30 days. |
| Security audit and hardening | $350 | A full inside review with logins. The fee is credited toward any catch-up you book. |
- Extra work outside a plan: $95 an hour, billed in 15-minute steps.
- Churches and registered charities: 15% off monthly care plans.
- Not sure which catch-up you need? The free site check tells you, and the price is confirmed before we start.
Questions people ask
My WordPress site seems fine. Does it really need anything?
Most hacked sites seemed fine the day before. WordPress, its plugins and the PHP software underneath all get security fixes every few weeks. If nobody is applying them, the site falls further behind every month, even though nothing looks different from the outside.
Was my site affected by the PHP2Shell flaw?
Any WordPress site running an unpatched version of PHP 8.2, 8.3, 8.4 or 8.5 is exposed. The fixed versions are 8.2.35, 8.3.36, 8.4.27 and 8.5.12. A site check tells you which version your site runs and whether there are signs anyone got in.
Do you only work with businesses in Chilliwack?
No. We are based in Chilliwack and happy to meet in person anywhere in the Fraser Valley, from Abbotsford to Hope, but all of the work can be done remotely for sites anywhere.
Will updates break my site?
Every update starts with a full backup that we have tested, and plugins are updated one at a time with a check after each. If something does not look right, the site is rolled back while we sort it out.
Can you host the site for me?
Yes. We can move your site onto a server we manage, with nightly backups, uptime monitoring and Cloudflare protection, or keep it with your current host and look after it there.