Website Security

Sites get breached through outdated code, loose access, and nobody watching. 84EM hardens the site, controls access, monitors for changes, and responds when something gets through. The work is senior-level and US-based.

Hardening

Security headers, TLS, file permissions, and configuration tightened across the stack.

Access control

Least privilege enforced, 2FA required, access audited on a schedule.

Patching, tested first

Core, plugins, dependencies, and server packages kept current.

Monitoring

File integrity, vulnerability, and uptime scanning with alerts.

Incident response

Threats contained and evidence preserved, then the site cleaned and restored.

Why 84EM

Senior-level execution: The person who monitors the site is the person who fixes it, and you work with them directly.

Proactive monitoring: 84EM watches for pending updates, security threats, and performance problems, then deals with them early.

US-based: 84EM works from Cedar Rapids, Iowa, in a timezone close to yours.

CLIENT_REVIEW

"We have managed 100% uptime for more than 1 calendar year, a feat that is frankly pretty incredible."

What's included in a security program?

Hardening, access control, monitoring for unauthorized change, tested patching, restore-tested backups, incident response, uptime and performance checks, and monthly reports. Our WordPress security guide explains each part.

Security Hardening

Security headers, TLS configuration, file permissions, and database hardening.

Access Control

Least privilege enforced, 2FA required, and user access audited on a schedule.

Security Monitoring

File integrity checks, vulnerability scanning, login and change logs, and suspicious activity alerts.

Tested Patching

WordPress core, plugins, and themes, application dependencies, and server packages, tested before deployment.

Backups

Daily automated backups, stored off-site and restore-tested.

Incident Response

Threats contained, evidence preserved, the cause tracked down, then the site cleaned and restored. You are notified from the start, with help notifying anyone else who needs to know.

Uptime & Performance Monitoring

Checked 24/7, with alerts when the site goes down or slows.

Direct Communication

Questions go straight to 84EM by email.

Monthly Reports

A summary of patches applied and findings resolved.

How does 84EM handle an incident?

Contain the incident first, then clean and restore the site, then document what went wrong and change what let it happen.

01

Contain

Stop active threats and preserve logs and a copy of the affected files.

02

Clean

Remove what the attacker left and close the way they got in.

03

Restore

Restore from a backup checked to be clean, then confirm the site works normally.

04

Prevent

Document what went wrong and make changes that reduce the chance it happens again.

> RUNNING_SECURITY_AUDIT... [84EM_HARDENING]

> FILE_PERMISSIONS: AUDITED

> USER_ACCESS: AUDITED

> LEAST_PRIVILEGE: ENFORCED

> 2FA: REQUIRED

> DATABASE_SECURITY: REVIEWED

> SECURITY_HEADERS: CONFIGURED

> OUTDATED_CODE: REMOVED

Further Reading from 84EM

WordPress Plugins Get a Bad Rap. This Is Why.

Someone bought 30 WordPress plugins from a legitimate company and backdoored every one of them. The standard advice about vetting plugins isn't enough.

Read more: WordPress Plugins Get a Bad Rap. This Is Why.

WordPress 7.0.2 Patched a Serious Hole in Its Own Core

WordPress 7.0.2 fixed a serious flaw in WordPress itself, not a plugin. More core security releases have followed, which makes the case for keeping your site updated rather than against using WordPress.

Read more: WordPress 7.0.2 Patched a Serious Hole in Its Own Core
84EM is nothing but a breath of fresh air in a world of unreliable vendors. They do what they say, communicate, and do excellent work!!

[84EM] developed an entire online ecosystem built in WordPress for a medical consulting company from the ground up. [They] mapped out, designed, developed, and supported [the] project for the past 4 years exquisitely and without ANY problems!!

Erin Pheil Founder Followbright Web Agency
See a project: Followbright Web Agency Read all testimonials

Frequently asked questions.

Does 84EM provide ongoing maintenance and support?

Yes. Monthly retainers include development, consulting, support, maintenance, and security. See Website Security.

Can 84EM fix a hacked website?

Yes. 84EM contains the incident and preserves a copy of the affected files and logs, tracks down how the attacker got in, removes what they left and closes that way in, restores the site, then hardens it and adds monitoring.

Can 84EM build custom two-factor authentication without per-user fees?

84EM builds custom text-message and multi-step 2FA with full control over security policy and no ongoing per-user subscription. One client replaced a third-party 2FA service with a custom system for exactly that reason.

How does 84EM handle website security?

Regular updates, vulnerability scanning, malware detection, access controls, two-factor authentication, strong password enforcement, SSL/TLS, database hardening, file monitoring, audit trails, least privilege principle, and backup/disaster recovery.

Does 84EM provide hosting?

No. Clients own their hosting accounts directly. 84EM provides recommendations and configuration assistance.

How do I get started with 84EM?

Contact 84EM to discuss your requirements, timeline, and budget. No commitment required.

Want ongoing security for your site?

Send your site or application details. 84EM hardens it, watches it, and responds when something breaks.

Folks we've helped.