How to back up, restore and secure the WordPress sites you look after.
PHP's October 21, 2026 announcement covers two critical RCE flaws that also matter for WordPress sites. Which version to update to and what to do now.
Choose a backup region per site in WP Safer: how it works, why it locks after the first backup, and what it does not promise.
What actually happens between a WordPress site going down and you finding out — and how plan-based check intervals, two-check confirmation, and WordPress-specific health checks close that gap.
Moving a WordPress site to a new host used to mean FTP clients, database exports, and crossed fingers on DNS. Here's how WP Safer's wizard handles the whole thing — and when to reach for the paid migration service instead.
Every WordPress site gets hit with automated login attempts. An IP allow list shuts that door before a login form is ever rendered — here is how to do it without breaking your forms or checkout.
Strange redirects, a blacklist warning or a login that no longer works: what you do in the first 24 hours decides both the damage and the client relationship.
Saying “we take backups” is not enough. How you take them decides how fast and how recent a point you can return to when disaster strikes.
Backup, security and update practices for people who look after more than one WordPress site. No sales emails, unsubscribe in one click.
