Most website security problems are invisible until something goes wrong. A compromised site doesn’t always look broken – in many cases the owner has no idea until Google flags it, a customer reports something suspicious, or the hosting provider sends a warning.
The basics to check yourself
The good news is that the most common vulnerabilities are also the most preventable. Here’s what to check.
- Your site uses HTTPS. Look at your website address in a browser – it should start with https:// and show a padlock icon. If it shows http:// or “not secure,” your SSL certificate is either missing or expired. This affects both security and your Google search ranking. See 5 Website Mistakes That May Harm Your Small Business for more on why this matters.
- Your software is up to date. If your website runs on WordPress, log into the admin panel and check whether there are pending updates for the core software, plugins or themes. Outdated software is one of the most common entry points for attackers. See How much maintenance does a website need? for a fuller explanation of what this involves.
- Your passwords are strong and unique. If your website admin password is something you’ve used elsewhere, or something simple, it’s worth changing it now. See our password security blog post for practical guidance.
- You have a recent backup. If your site was compromised today, could you restore it from a backup taken in the last week? If not, that’s a gap worth closing.
- Your user accounts are current. If you’ve had a web developer, contractor or staff member with access to your site who no longer works with you, their account should have been removed or the password changed.
Signs something may already be wrong
- Your site is loading unusually slowly or behaving strangely.
- You’ve received warnings from Google Search Console.
- Customers have reported suspicious redirects or unexpected content.
- Your hosting provider has flagged unusual activity.
- You’re seeing unexpected admin users or unfamiliar files in your hosting account.
If any of these apply, the site may already be compromised and needs attention promptly.
What WebSolutionZ can help with
If you’re not sure where your site stands, a security review covers all of the above and more – your website, email accounts, cloud tools and user access. It’s delivered as part of our Cyber Security & Safety service. For a broader picture of what good security looks like for a small business, see What is cyber security?