Website security guides
Practical, plain-language guides to keeping a website secure and online: how to spot a hack, what scanners can and cannot see, how to fix certificate errors and what security headers do. Plus fair comparisons with other security services.
Last updated
Security guides
Check if a website is hacked
How to check if your website has been hacked: what to look for in search results, page source, files, users and DNS, and what a clean result means.
Scan a website for malware
How website malware scanning works: what online scanners can and cannot see, why server-side checks matter, and how to combine both on your own site.
WordPress security checklist
A practical WordPress security checklist for 2026: logins and 2FA, updates, plugins, hosting, configuration, backups, firewall and monitoring.
Fix "Not secure" and SSL errors
Why browsers show "Not secure" or certificate errors, and how to fix each one: missing HTTPS, expired or mismatched certificates, chains and mixed content.
What is a WAF?
What a web application firewall is, how cloud, server and plugin WAFs differ, what a WAF blocks and cannot fix, and how to roll one out safely.
Security headers explained
What each HTTP security header does (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy and more), values to start with and safe rollout.
Is my WordPress plugin vulnerable?
How to check whether a WordPress plugin has known vulnerabilities, read an advisory (affected versions, severity, exploitation) and act when no fix exists.
Website hacked: what to do
A calm, step-by-step plan for a hacked website: contain the damage, keep evidence, change credentials, clean or restore, close the entry point and harden.
Uptime monitoring explained
How website uptime monitoring works: check intervals, false alarms, what 99.9% uptime allows, response time, and certificate, DNS and content monitoring.
Webforta compared
Side-by-side comparisons built from each competitor's own public pages, with sources and the date we checked them, including where the other service is stronger.
Webforta vs Sucuri
An honest comparison of Webforta and Sucuri: pricing, firewall, scanning, monitoring and malware removal, where each is stronger and which fits your site.
Webforta vs MalCare
A fair comparison of Webforta and MalCare for WordPress security: pricing, malware scanning and cleanup, firewalls, monitoring and where each fits best.
Webforta vs Wordfence
An honest comparison of Webforta and Wordfence: endpoint vs edge firewall, malware scanning, incident response, monitoring and where each fits best.
Check your site now
Security headers checker
Grade HTTP security headers from A+ to F with fixes.
SSL certificate checker
Expiry, issuer, covered names, redirects and HSTS.
WordPress plugin vulnerabilities
Known issues per plugin and the version that fixes them.
security.txt generator
Tell researchers how to report a vulnerability to you.
Put these guides into practice
Webforta scans your verified websites, monitors uptime, certificates and DNS, and can put a firewall in front of them. Start with a 14-day trial or the Free plan.