Cybersecurity for small business websites

All too often the media shares stories of large organisations and companies that have been hacked through their website. Customer data and private information gets stolen all the time. The unfortunate truth, however, is that it’s not just these large-scale companies that are being targeted. Small businesses are just as likely to be targeted. We’re just far less likely to hear about it. That’s why cybersecurity for small business is just as important.

Recovering from a security breach is expensive and can be catastrophic for a small business without the necessary cybersecurity measures in place. Read on for some of our quick cybersecurity for small business tips.

Keep your domain information private

If a hacker has access to your name, your email address or even your mailing address, they can use this information to hack into your website or worse. The more personal information they can collect about you, the easier their job is, and you could find yourself facing a case of stalking or identity theft. Employ domain privacy to shield all your personal details from hackers and identity thieves.

Invest in an SSL certificate

Many internet users now will not trust any website without an SSL certificate in the browser bar, and we know Google relies heavily on SSL certification for a good ranking. However, this isn’t just a good investment for business – it also protects your site from hackers by encrypting all the data stored on it. All of our hosting packages come with free SSL certificates as standard!

Automatic backups

One of the most damaging ways a hacker can destroy your business is to crash your entire website or cause such problems that customers can no longer access your site.

With an automatic backup, you can work safe in the knowledge that should anything happen, you know you have everything you need to get the site up and running again quickly and easily. Ensuring that the automatic backup updates itself on a daily basis is key to being able to restore as recent a version as possible should it become necessary.

Malware scans and removals

It sounds like something out of Doctor Who, but cybercriminals are now a very real threat to small businesses that work online. With access to coding that can steal data and allow access to your site at the click of a few buttons, cybercriminals can attack a site before you even realise it’s happening. That’s why automatic malware scans are so vital.

These malware scans perform regular automated scans on your entire site; identifying and removing any potential threats to your security. By investing in one of these, you can be sure that any vulnerable areas will be identified and fixed before a hacker can exploit them.

Domain renewals

Another thing worth investing in simply because it can be done automatically is domain renewal. After an allotted period of time, your domain will come up for renewal and if you don’t act quickly you can lose control of your business domain name. Not only is this bad for business, but it also leaves you expired domain open for exploitation and unregistered access, whereby any cybercriminal could find out yours and your customer’s personal data and email addresses.

This can be prevented with automatic domain renewal. It’s an easy way to register your domain name so it refreshes annually. This can generally be managed through the billing information on your domain registration account.

Automatic updates

Staying up to date is one of the best ways to ensure foolproof security. It ensures your cybersecurity is working on its newest and most effective version. Many updates that become available have been created to patch up the flaws left open in an old version. So, neglecting to update with them can mean that your site is still open to those flaws. And once a hacker gets in, it’s too late.

Set up WordPress and plugins to update automatically, to offer automatic protection.

Check your passwords

Creating a password is often a toss-up between choosing something easy to remember and hard to guess.  Trust us, the latter is much safer.

It’s important that not only you but anyone with access to your site uses a secure and unique password. Hackers can find a different way into the site even if your own password is super secure.

Login Forms

If customers can log in to their own accounts, you’re at risk of letting in a bot. Bots try thousands of login combos; allowing them into your site. Then they release malware to damage the business from the inside.

By adding protection layers to your login forms, this should be avoidable. Things like reCAPTCHA, are good examples, as automated bots are unable to identify these. It’s also worth enabling a tool that gives customers a set amount of login attempts before they become locked out. This annihilates the potential for trying multiple logins until one works.

These ideas are just some of the basis in cybersecurity, but they will ensure increased safety for both your business and your customers. And we think that’s an investment worth entertaining.

Keeping Hackers Out – the Basics

Hackers are the enemy of the online world, and can destroy everything you’ve worked on with the click of a button. Whether it’s an entire website of content, or accessing and destroying your client database, a breach of your website is a horrible blow to your hard work and can often feel like a very personal attack.

Protecting your website from hackers is one of the most important investments you can make into your online security, and not all of them require a tech-whizz – some of them you can employ right now. So, without further ado, read on for our top ideas for keeping hackers out.

Security Plugins

We talk a lot about plugins – some can help improve your SEO and some may make your developers life easier. Security plugins do a different job; actively preventing hackers from breaking into your website.

Content management systems are designed with a number of built-in plugins that do just this, and each one addresses the most vulnerable areas of security on the different platforms; whether you use WordPress, Magento or Joomla.

Another thing you can do to further tighten your online security is looking into SiteLock, which acts as a daily monitor across your website; identifying everything from a virus to active attempts to break into the site. Picture the online version of a burly bouncer on the door of a nightclub – that’s SiteLock, and it’s well worth the time spent on installing it.

HTTPS

If you’re inputting personal information into a website, for example, payment details during an online transaction, chances are you know to look for the green padlock at the beginning of the website address in the browser bar. Next to the green padlock, you will see the letters HTTPS – these five letters show you that the website is safe from hackers and that you can safely input your personal details without risk of theft.

Historically it has always been important for eCommerce websites to hold an SSL certificate because it secures the transfer of important and private information and ensures the safety of your website visitor’s data. Since July 2018 however, Google has taken to informing website visitors of every site that doesn’t have an SSL certificate, no matter what your website provides or does.

If you want your visitors – and Google – to trust your brand and your website, investing in an SSL certificate is a valuable investment as it will ensure your site is ranked highly on Google and will make visitors feel safe when visiting your site.

Keep your content management system up to date

This applies to everything. From the content management system to your plugins, apps and any additional scripts. If any of these are left outdated for too long, a hacker can get in.

Checking that your website is up to date is easy enough on WordPress, by checking directly through the dashboard. The dashboard will instantly tell you if the version you’re running is up to date.

Keep your passwords new and unique

Unfortunately, it’s not as easy as recalling the name of a favourite pet. Passwords are there for a reason, don’t make it easy. If it’s too simple, it’s going to lead the hackers straight to you.

When choosing a password, make it long and use a mixture of letters, characters and numbers to create something that really is unique.

And it’s not just you. If you work within a team who all have access to your website, making sure they all have strong passwords. This is just as important as your own. After all, the website is your business. Something as simple as a bad password can allow hackers in to quite literally destroy your business and livelihood.

Don’t take the chance!

Automatic back-ups

One of the worst things that a website hacker can do is erase all of your work. This is easy if you have no back-up.

Making sure you have a recent back-up of everything you do is super important. An automatic backup service will enable you to do this without even having to think about it.

There are a handful more ways in which you can secure your website from hackers. But these require a more technical skillset and understanding of how the backend of websites work.

For now, we suggest employing the above techniques in order to keep your site safe from hacker harm and will explore the more technical tips in a future post.