You don’t need to be a cybersecurity expert to protect your website—but ignoring basic security can create serious problems, from spam and slowdowns to outright takeovers.
At Solid Ground, we build your site on a secure foundation. Here’s what we set up by default—and what you should do on your end to keep things safe.
What Solid Ground Sets Up for Every Site
We don’t just build your website—we protect it. Every Solid Ground site includes:
- Wordfence Security (Free or Pro)
- Our go-to plugin for firewall protection, login security, and file scanning.
- Login protection
- We limit login attempts and monitor for unusual activity.
- Spam filters on forms
- To stop bots from spamming your inbox or injecting fake links.
- Vetted plugins and themes only
- We don’t install anything that hasn’t been tested for security and performance.
These tools are part of every project—but they’re fully managed if you’re on one of our website maintenance plans.
What You Can Do: Account Safety Best Practices
We handle the tech. You handle the passwords.
Here’s what we recommend for every site owner:
- Use long, unique passwords (at least 12 characters – longer is better)
- Use a password manager like Bitwarden, 1Password, or Apple Keychain to store them securely.
- Turn on two-factor authentication (2FA)
- Use an app like Google Authenticator or Authy—avoid text-based (SMS) codes when possible.
- Change passwords regularly
- Especially for admin accounts or if staff roles change.
Not sure how to enable 2FA or store passwords safely? If you’re on a Solid Ground support plan, we’ll help walk you through setup.
Our Backup Strategy
Stuff happens. Updates go sideways. Something breaks. That’s why regular backups are critical.
With Solid Ground hosting and support:
- Daily automated backups
- One-click restore points via WP Engine (or GoDaddy, if applicable)
- Optional plugin-based backups for additional redundancy
What’s included in your plan:
- Essentials and Growth Plans:
- 1 free backup restore per year, additional restores billed as needed
- Full Support and Church/Nonprofit Plans:
- Unlimited backup restores included
All plans require hosting with Solid Ground
You’ll never be left wondering how to get your site back online—just contact us, and we’ll take care of it.
Spotting Scam Emails (Phishing 101)
Security tools won’t help if you fall for a phishing attempt. Here’s how to avoid common traps:
- Don’t click links or attachments from suspicious senders
- Look for weird grammar, urgent language, or odd email addresses
- If the email claims to be from your bank or registrar—don’t reply or use contact info in the message
- Instead, visit the company’s official site directly
If something feels off, trust your instincts.
Final Thought: Security Is a Shared Responsibility
We’ve got the tech side covered—firewalls, updates, backups, and secure hosting—but security works best when you’re also engaged.
A strong password, a second look at that sketchy email, and a habit of regular logins can go a long way.
Want full protection, peace of mind, and someone on call when questions come up?
Check out our support and maintenance plans »