Website Security and Malware Protection
WAF, malware scanning, monitoring and incident-response options for website security. Products, scan frequency, cleanup, penetration testing and human response are defined in the written quote and, where applicable, the order/SLA record.
Plans
Subscription, one-time, project or daily billing is stated on each plan card.
- 1 website protection — subject to the written quote
- Imunify360 standard — subject to the written quote
- Scan frequency follows risk and quoted scope — subject to the written quote
- WAF basic ruleset — subject to the written quote
- Brute-force protection — subject to the written quote
- Reporting frequency stated in the quote — subject to the written quote
- 5 websites protection — subject to the written quote
- Imunify360 + Sucuri WAF — subject to the written quote
- Scan and cleanup model defined in the quote — subject to the written quote
- DDoS protection (CloudFlare Pro) — subject to the written quote
- On-demand malware cleanup — subject to the written quote
- Penetration test only when separately scoped — subject to the written quote
- Site count defined in the proposal — subject to the written quote
- Imunify360 + Sucuri Enterprise + custom WAF — subject to the written quote
- Continuous automated malware monitoring; cleanup per SLA — subject to the written quote
- DDoS mitigation according to the provider plan — subject to the written quote
- Penetration-test frequency in written scope — subject to the written quote
- Automated monitoring and specialist assignment only within quote/SLA scope — subject to the written quote
Attacks are now automated — your defence must be too
Bot scans, brute-force attempts and application-layer attacks are automated, so defence must produce continuous telemetry as well. We combine Imunify360, Sucuri WAF and scenario-specific Cloudflare rules for layered defence; these controls reduce risk but do not replace secure coding, patching and testing.
Service Scope
- Web Application Firewall (WAF) setup and management
- Malware scanning; automated or human-reviewed cleanup only when quoted
- Brute-force protection (limits login attempts)
- DDoS-mitigation configuration on an eligible provider plan
- SSL + HTTPS forced redirect
- Sensitive file access blocking (.env, .git, etc.)
- Penetration-testing option when separately stated in scope
- 24/7 automated alerts; human response per plan and SLA
Plan Comparison
| Feature | Security-Basic | Security-Pro | Security-Enterprise |
|---|---|---|---|
| Protection | |||
| Number of sites | Defined in the written quote | Defined in the written quote | Defined in the written quote |
| Malware scanning and cleanup | Defined in the written quote | Defined in the written quote | Defined in the written quote |
| WAF components | Defined in the written quote | Defined in the written quote | Defined in the written quote |
| DDoS mitigation | Defined in the written quote | Defined in the written quote | Defined in the written quote |
| Penetration testing | Defined in the written quote | Defined in the written quote | Defined in the written quote |
Frequently Asked Questions
My site got hacked — can you clean it fast?
Need this service?
Requests accepted 24/7 · standard support Mon–Fri 09:00–18:00 · critical on-call only under the applicable product or written SLA