Website Security
Website security is the continuing management of identities, software, data and recovery. Small websites are commonly scanned automatically, so being obscure is not a defence and one security plugin is not a complete…
The main guide for this topic
Website Security Headers
HTTP security headers instruct browsers to apply restrictions that can reduce selected web risks. They are useful defence in depth, but incorrect settings can break scripts, payments, embedded service…
Open the complete guide →Articles in this section
Website Security Headers
HTTP security headers instruct browsers to apply restrictions that can reduce selected web risks. They are useful defence in depth…
Read guide →Website Security Basics for Small Businesses
Small-business website security should begin with a short set of controls that reliably reduce common risks. Expensive tools canno…
Read guide →Website Security After a Breach
After a breach, the priority is to contain harm, preserve evidence and restore trustworthy operation. Rushing to delete suspicious…
Read guide →Website Firewall and Malware Protection
A web application firewall and malware scanner can reduce risk, but neither proves that a website is clean or secure. Their value …
Read guide →Brute Force Attack Protection
Brute-force protection should address password guessing, password spraying and credential stuffing without locking legitimate user…
Read guide →How to Secure a Website
Securing a website is best treated as a sequence: establish ownership, reduce exposure, protect access, monitor changes and prepar…
Read guide →How to Prevent Contact-Form Spam
Contact-form spam ranges from harmless bulk messages to phishing, abuse of email delivery and automated attempts to exploit form h…
Read guide →