Hosting that stands guard over your site day and night

Before a request gets anywhere near your site's code, the managed web application firewall has already looked at it and compared it against a set of known attack patterns that is updated constantly. SQL injection attempts, the kind that try to read or alter your database, get blocked. So do cross-site scripting payloads aimed at hijacking a visitor's session, along with remote file inclusion, directory traversal and command injection. Abusive bots are filtered out, as are credential-stuffing scripts and traffic sniffing around for well-known plugin or theme holes. The firewall being fully managed means you never write a rule or maintain one; we tune and update them as fresh threats surface. Real visitors go straight through and notice nothing at all. Bad requests die at the edge, which spares your server the load. Plenty of common attacks are therefore finished long before they can reach your application, your database or your files.

Imunify360 comes with every secure plan. It scans your files in the background without stopping, and it scans again the instant something is uploaded or changed. When it finds malicious code, whether that is an injected backdoor, a defaced page, a phishing kit or a spam mailer, the affected file goes into quarantine on its own, so the infection sits isolated instead of working its way across the account. Your dashboard shows a plain alert saying what turned up and where, and you can review those items or restore them if you need to. Detection is only half of it. Virtual patching covers outdated plugins and themes against known exploits until you have time to update, which closes the window attackers count on. Since the scanning is constant and proactive rather than a once-a-day sweep, most trouble is caught and contained inside minutes, leaving your site clean and your visitors safe.

Yes, and free means free: no trial period, no first-year promotion, no upsell waiting later on. Every domain and subdomain on a secure plan gets an SSL certificate, issued automatically the moment you go live and renewed automatically before the old one runs out, for as long as the site stays with us. The padlock in your visitors' browsers never lapses, and nobody chases you for a renewal fee. What SSL does is encrypt the connection between a visitor and your server, which protects login details, contact form entries, checkout data and anything else somebody types into your pages. It is a confirmed search-ranking signal too, and it keeps browsers from labelling your pages 'Not secure'. Nothing needs installing or configuring by hand. The certificate is provisioned and maintained for you, so encryption is simply on from the first day the site is live.

Backups run automatically every day, and they are stored off-server, which puts a copy of your site somewhere other than the machine it exists to protect. Files and databases both go into each backup, so what you recover is a complete working site rather than parts you then have to bolt together. Restoring is yours to do. Pick a recovery point in the dashboard and roll back the whole account, one site, or a single database: a few clicks, usually a few minutes. Think of it as an undo button for most of what goes wrong, whether that is a botched update, a bad edit, a file deleted by accident, or at the worst end a security incident. Nothing has to be remembered, since the backups take themselves. And because they live off-server, they are still there even when the live environment itself has fallen over.

No. The mitigation happens out at the network edge, a long way in front of your server, and what it examines is the shape and volume of incoming traffic rather than the contents of individual page requests. Genuine visitors get waved through with no delay added to their journey. A flood of packets sent to overwhelm your site, on the other hand, is absorbed and filtered out before it comes anywhere near your hosting. Filtering capacity sits across our wider network, which is why it can swallow volumetric attacks far bigger than one server could ever stand up to. So the site keeps serving during an attack that would take an unprotected site down. None of it needs switching on or configuring. It runs on every plan, all the time, guarding your uptime whether anyone is aiming at you or not.

Two things at once: automated systems and actual people, watching the platform every hour of every day. The automated half tracks server health, uptime, resource usage, disk and network behaviour, and the signatures of known intrusions, throwing an alert the instant a figure drifts outside its normal range. Our team then reads those alerts and digs into anything that looks off, straight away, instead of waiting for a customer to notice and open a ticket. Hardware faults fall under that. So do odd traffic spikes, repeated login failures and the fingerprints of a compromise, which is how problems often get handled before your visitors ever feel them. Sat alongside the firewall, the malware scanning and the daily backups, monitoring is the layer keeping watch while you sleep or work on something else. Spot something yourself and the same 24/7 support team is one message away.