The dedicated servers FireCask own are kept as secure as possible. We perform regular package updates, provide restricted access on a frequently reviewed basis and, other techniques to ensure the security of your website sat upon our server. FireCask does not allow access to our servers to anyone other than the key server maintenance team members who need access. As security always comes first, we don’t even allow SFTP/FTP access to our clients.
Of course, just because a server is secure, it does not mean the websites sat upon the server are. Throughout the process of developing and maintaining a website, FireCask ensures security is always present in the thought process. Using minimal WordPress plugins (and only those that are from trusted developers), removing redundant and unnecessary code bloat, unit testing and general common sense, we attempt to minimise the likelihood of a vulnerability being present in any of our websites code bases. As with our servers, we do not allow our clients to simply install a WordPress plugin onto their sites, our team of developers will first review the request and ensure there are no known vulnerabilities before installing.
FireCask maintains a policy that every website we host MUST be secured via an SSL certificate. Gone are the days where having an SSL certificate was seen to be for online shops, geeks to play about with and which cost a fortune. A free SSL certificate is issued for all sites we host (even staging sites) and is hardened using the appropriate Cipher and a strong Diffie-Hellman key amongst other techniques. SSL Certificates are tested once implemented and renewed regularly.
FireCask don’t just stop at ensuring the servers, websites and SSL certificates are as secure as possible. We also go further by performing simple yet effective tasks such as adding in additional server headers, running testing tools, having user access levels and blocking IP addresses where necessary. Our code is securely stored using version control systems and backed up in multiple places.
Do you need a more comprehensive security test? FireCask can if necessary provide external Penetration Testing (Pen Test) through our trusted partners to ensure that your website is as secure as possible. We work with our penetration testers to provide you with a document explaining all the tests performed and what has been done to remedy any issue found.
Not only do FireCask make every effort to keep our customer’s websites, servers and projects secure, but we of course also ensure our non-digital security is as strong as possible.
Contact Us:
Contact Us:
Contact Us:
Contact Us:
Contact Us:
Contact Us:
