Summary: Automated attacks target websites of every size. A few basic measures prevent most problems.
Bots scan the internet constantly for vulnerable websites. Small business sites are frequent targets because they are often less protected.
Essentials
- HTTPS on every page
- Regular updates to your CMS, themes and plugins
- Strong passwords and two-factor authentication
- A web application firewall
- Daily off-site backups
- Malware scanning
Protect forms
Spam filters and honeypot fields block most automated submissions.
Domain security
Lock your domain, enable two-factor authentication at your registrar and keep contact details current.
If something goes wrong
Restore from a clean backup, change passwords, patch the vulnerability and check search console warnings.
FAQs
Is free SSL enough?
For most sites, yes.
How often should we back up?
Daily is a good standard.
Do security plugins slow sites down?
Some can; choose lightweight options.
