Security Lockdown — What's Included

    A one-time, done-for-you hardening service. Our engineers handle every step — you don't need any technical knowledge.

    Security Lockdown

    One-time · €149 per site

    Deep server-level hardening: insecure headers fixed, exposed files blocked, XML-RPC neutralised, plugin and theme patching, wp-config lockdown, file permission tightening, login protection, and a full post-fix verification scan.

    What we do

    Security Headers Implementation

    Six critical HTTP security headers — CSP, X-Frame-Options, X-Content-Type-Options, HSTS, Referrer-Policy, Permissions-Policy — to block clickjacking, XSS, MIME-sniffing, and protocol downgrade attacks.

    XML-RPC Lockdown

    Disable a legacy WordPress API frequently exploited for brute-force amplification and DDoS attacks.

    Sensitive File Blocking

    Block public access to readme.txt, license.txt, .env, .git, error_log, debug.log, wp-config backup files — all of which can leak version info, credentials, or server paths.

    Dashboard File Editor Disabled

    Add DISALLOW_FILE_EDIT to wp-config.php so compromised admin accounts can't inject arbitrary PHP from the dashboard.

    Directory Listing Disabled

    Stop visitors browsing /wp-content/uploads/ and /wp-content/plugins/. Disables directory indexes and adds protective index.php files.

    WordPress Version Exposure Fix

    Strip your WordPress version from the generator meta tag, RSS feeds, and version query strings so attackers can't target version-specific exploits.

    User Enumeration Protection

    Block the REST API /wp/v2/users endpoint and ?author=N URL redirects, preventing attackers from discovering valid admin usernames.

    Login Security Assessment

    We assess your login page for brute-force protection, 2FA, and CAPTCHA. We then either configure your existing security plugin or recommend the right solution.

    WAF & Firewall Assessment

    Check whether your site is protected by a Web Application Firewall and provide specific recommendations if none is detected.

    Vulnerability Report

    A full written report of every finding from our scan, with severity ratings and CVE references where applicable.

    Post-Fix Verification Scan

    After everything is applied, we run a full re-scan and deliver an updated report so you can see exactly how your score improved.

    Plugin Updates & Vulnerability Patching

    Every plugin updated to its latest stable version, prioritising those with known vulnerabilities. Includes compatibility checks and a rollback plan if anything breaks.

    Theme Updates & Cleanup

    All themes updated; unused themes removed entirely to eliminate dead code.

    wp-config.php Hardening

    Lock down wp-config.php with security constants and ensure error information is never exposed to visitors.

    Want continuous monitoring on top? Add Sentinel for €99/month (or €891/year — save 25%) for always-on protection, malware detection, and full audit trail.