Order and security
For a small business, security is not an antivirus but order: who has access to what, what happens if an employee leaves, is the site updated, who scrapes it at night. I look at what is open, close what should not be, and if you were already hacked, I clean up and close the hole.
Topics I will cover separately
- Security audit: website, server, access, what to fix first
- Check the site before launch: forms, file uploads, admin panel
- The site got hacked: clean up and close the hole
- A plan for when you get hacked: what to switch off, whom to warn, how to recover
- Access for employees and contractors
- Two-factor login and a password manager
- Bot and scraper protection: Anubis, Cloudflare Turnstile, rate limits
Did not find your case?
Write it as it is. If it is about security, I have most likely seen it before.
