Secure web hosting UK

Secure web hosting from £2.99 a month

Every hosting plan comes with the same security: a web firewall and malware scanner on the server, free SSL, each account kept separate from its neighbours, and off-site backups every six hours. It’s all included in the price.

See hosting plans WordPress hosting

Imunify360 · Free SSL · CloudLinux · JetBackup every 6 hours

How your website is protected

Five layers between an attacker and your website

Every request to your site passes through the same checks, on every plan. Most attacks on small business websites are automated scans and login attempts, which these checks are built to catch.

Protection runs on the server, so there’s no security plugin to set up
Your account is kept apart from every other account on the server
If something does go wrong, you can restore a backup from earlier the same day

See hosting plans

Visitors, search engines, bots and attackers

DDoS protectionFloods of fake traffic are filtered on the network

Filtered

Imunify360 firewallKnown bad addresses and repeated login attempts are blocked

Blocked

Malware scanningUploaded and changed files are checked for malicious code

Scanned

CloudLinux isolationYour account runs in its own space with its own resources

Isolated

Free SSLEverything between the visitor and your site is encrypted

Encrypted

Your websiteyourbusiness.co.uk

Online

And a copy goes off-site every six hours with JetBackup

On every plan

The security included with your hosting

Firewall and malware scanning

Imunify360 runs on every server.

A web application firewall blocks common attacks before they reach your site
Repeated failed logins are blocked automatically, which stops most password-guessing attacks
Files are scanned for malware, and infected files can be cleaned from cPanel

Free SSL on every domain

The padlock in the address bar.

Let’s Encrypt certificates for every domain and subdomain
Installed and renewed automatically
Encrypts logins, contact forms and checkouts

Accounts kept apart

Another customer’s problem shouldn’t become yours.

CloudLinux puts each account in its own space
One hacked site can’t read another account’s files
Each account has its own CPU and memory, so an attack on a neighbour can’t slow you down

Backups to fall back on

When something does go wrong, you need a clean copy.

JetBackup takes a copy every six hours
Backups are stored off-site, away from the server
Restore a single file, a database or the whole account from cPanel

Email filtering

Protection for the mail you send and receive.

Spam filtering on incoming mail
Outgoing mail checked by MailChannels, which helps keep the server off blocklists
Mail can be sent over encrypted connections from your phone and computer

Secure data centres

The physical side matters too.

Two Manchester data centres certified to ISO 27001 and PCI-DSS
Security approved to NSI Gold, with iris scanning at the doors
Upstream DDoS mitigation of more than 2 Tbps

Backups every six hours

Four backups a day, and you can restore them yourself

JetBackup copies your website, databases and email to separate storage four times a day. If an update breaks your site or a file is deleted, you can put it back from cPanel without waiting for anyone.

Today's backupsOff-site copy · up to date

A single fileBring back one page, image or setting.

A databaseRoll back a WordPress or shop database.

An email accountRecover a mailbox or deleted messages.

The whole accountPut everything back to an earlier point.

How to restore a backup

The security software on our servers

Runs on

Imunify360
CloudLinux
JetBackup
Let's Encrypt
cPanel
WordPress

Pay by

Visa
Mastercard
PayPal
Stripe
Direct Debit

ISO 27001 certified data centres
PCI-DSS certified data centres
UK company no. 10816828
60-day money-back guarantee

Your part

What you can do to keep your site safe

Server security stops most attacks. The rest usually get in through a weak password or an old plugin. These steps close most of those gaps:

Use a different, long password for cPanel, WordPress and email. A password manager makes this easy.
Turn on two-factor authentication in cPanel, under Security, so a stolen password isn’t enough to get in.
Keep WordPress, plugins and themes up to date. On our WordPress plans, WP Toolkit can apply updates for you and check the site afterwards.
Remove plugins and themes you don’t use. Even switched-off plugins can be a way in.
Don’t share logins. Give a designer or developer their own account, and delete it when they’re done.

If your site is hacked

Open a support ticket straight away. We’ll help you find what changed, clean the files or restore a backup from before the problem started, and work out how it got in so it doesn’t happen again. Our guide to scanning your site for malware shows the first checks you can run yourself.

Data protection

Your site, email and backups stay on servers in the UK, under UK data protection law. That makes GDPR simpler: you can tell customers where their data is held. Read more about who owns your website and data.

Secure hosting questions

Is security included in every plan?

Yes. Imunify360, free SSL, CloudLinux isolation and six-hourly backups are on every plan, from Web Starter at £2.99 a month.

Do I need to buy an SSL certificate?

No. Free Let’s Encrypt certificates are installed and renewed automatically on every domain.

Can you guarantee my site won't be hacked?

No host can promise that. Most hacks come through weak passwords or out-of-date plugins. The server protection stops a lot of attacks, and the backups mean you can recover if something gets through.

What happens if my site gets malware?

Imunify360 will usually spot it. You can clean infected files from cPanel, restore a clean backup, or open a ticket and we’ll help.

Is my data stored in the UK?

Yes. Your website, email and backups are on servers in Manchester.

Can I use two-factor authentication?

Yes. Turn it on for cPanel under Security, and use a plugin to add it to WordPress logins.

Secure UK hosting from £2.99 a month

Firewall, malware scanning, SSL and off-site backups on every plan.

See web hosting WordPress hosting