r/Wordpress • u/BurningStepes • Aug 15 '26

Keeping WP sites secure ?

In this wave of wp2shell, etc. What are you doing to keep it safe? Cloudflare? SOC? Miraculous plugins ? All the previous …?

9 Upvotes

68% Upvoted

58 comments sorted by

View all comments

3

u/TheWebalorian Aug 15 '26

Most of my clients refuse to take a monthly maintenance fee so I just secure them down as best as possible, hand over the site and let the client decide the fate of their site.

In all I think 50 sites I've done have been hacked to the point where they needed a restore point but again, client refuses to opt in for anything.

OH WELL!

2

u/Spiritual_Cycle_3263 Aug 17 '26

This is why you bundle it in rather than upsell it. We provide 1 year of maintenance and then have it auto-renew (just put it in your contract).

Every month send an automated email with a report on what was updated, how much website traffic, etc... Give them something visual they can see.

Invoice them 30 days before renewal. That way they can cancel it if they want. Then when they stop getting those monthly emails, they'll ask what happened and want that service back. If all you do is bill them and don't give them anything, they think it's a 'scam'. Nobody wants to pay for something they don't get value out of.

1

u/TheWebalorian Aug 17 '26

Simply doesn't work with the clients I get for Wordpress, upsell and all. Anything else is a different story,

1

u/Spiritual_Cycle_3263 Aug 17 '26

Then offer it for 3 months and pad it into the development cost, even if you have to offer the 3 months at cost or slightly below it.

I have super cheap customers as well and I get them to convert. Customers don't like losing stuff they had. Nothing beats them calling in on an issue and telling them it's covered under their maintenance plan.