Prevention

Secure WordPress

The security level of a WordPress website depends on up-to-date components, protected access points, appropriate user permissions and the server configuration. The measures required are determined by the actual setup of the installation.

I review the current state, implement the agreed security measures and document the changed configuration.

Elias Arndt, WordPress expert from Schleswig
Elias Arndt

WordPress security and technical support
★★★★★ 5,0 on Google

  • Response within 4 hours
  • Restoration within 6 hours; half price if exceeded
  • Cleanup €280 net at a fixed price
  • Money-back guarantee
0157 57244734
Fill out the form

Report an emergency

I will get back to you within 4 hours.

Areas of WordPress hardening

The assessment shows which measures make sense and can technically be implemented for the respective website.

Software status

The WordPress core, plugins and themes are checked for available security updates, compatibility and continued use.

Installed extensions

Unused plugins and themes are removed after consultation so that no unnecessary executable components remain on the server.

Access credentials

Administrator, hosting and server access points are checked and secured with unique passwords and, where available, a second factor.

User permissions

Accounts are given the permissions they need for their tasks. Administrator permissions remain limited to the users designated for this purpose.

This includes hardening

1

Initial assessment

I record versions, extensions, user accounts, roles, file permissions, backups and relevant server settings.

2

Reduce the attack surface

Unneeded components are removed after approval. Available WordPress and server functions are configured to suit the website’s use.

3

Protect access

Affected passwords are renewed, two-factor authentication is set up where available and user roles are adjusted.

4

Set up controls

Checksums, notifications of relevant changes and a comparison with reported vulnerabilities are set up.

Services and prices

Malware scan

50 €

plus VAT · one-time

  • Assessment of files, database and server configuration
  • Analysis of available access logs
  • Written report with documented findings
  • Recommendations for the next technical steps

If you commission the cleanup afterwards, the 50 € will be fully credited.

Fixed price

Cleanup

280 €

plus VAT · fixed price, scan included

  • Technical assessment included in the price
  • Removal of the identified malicious code
  • Restoration of normal operation
  • Securing the identified access route and renewing relevant access credentials
  • Basic hardening of the WordPress installation
  • Technical report for the insurance company on request: €200 net
Money-back guarantee: If the cleanup or restoration is unsuccessful, the cleanup fee paid will be refunded.

Ongoing support

from €65

per month, plus VAT.

  • Controlled updates for WordPress, plugins and themes
  • Regular checks for malicious code
  • Continuous checks for newly reported vulnerabilities
  • Cleanup included in the monthly fee during the support period

Further terms and conditions:

  • All prices are plus 19 % VAT.
  • For work on Saturdays, Sundays or public holidays, a one-time weekend flat rate of €100 is charged.
  • The agreed response and restoration times apply Monday to Friday from 8 a.m. to 8 p.m.
  • The restoration period begins as soon as all required access credentials are available.
  • I will clarify the effort required for multiple websites in one installation, multisite systems and WooCommerce shops with ongoing orders before starting. Additional costs will be agreed before commissioning.

Frequently asked questions

What role does a security plugin play?

A security plugin can provide checks, notifications and additional protection rules. I tailor the selection and configuration to the hosting, website and existing components.

I charge for one-time hardening based on the time required and provide the cost range after the assessment. Hardening is included in ongoing support from 65 € net per month.

The impact depends on the functions used. I check the website after configuration and adapt resource-intensive checks to the technical environment.

Absolute security cannot be guaranteed. Up-to-date components, protected access points, appropriate permissions and monitoring reduce known risks and make early detection easier.

Have your WordPress configuration and access points secured

During the free initial consultation, we clarify the symptoms observed, the available access credentials and the sensible next step. If the cause is likely to lie outside WordPress, you will receive an appropriate assessment.

Call now: 0157 57244734
Emergency form

You can reach me Monday to Friday from 8 a.m. to 8 p.m. Related topics: WordPress maintenance · WordPress hacked – what to do now · Unknown administrators in WordPress · Remove WordPress malware