Skip to content
Security

Website security, handled as engineering.

Your site ships with HTTPS enforced, strict security headers and spam-filtered forms, and we keep it updated and monitored inside the monthly fee. You never choose a security add-on, patch a plugin or learn what a header does.

Book a callSee plans

What website security covers.

  • SSL and HTTPS enforced

    Every page is served over HTTPS, and browsers that have visited are told to refuse an unencrypted connection to the site for a year.

  • Strict security headers

    Headers that stop browsers guessing file types, stop other sites framing your pages, and limit what a link reveals about where a visitor came from.

  • Browser permissions switched off

    Camera, microphone, location and ad-interest tracking are turned off for the whole site, so nothing on a page can quietly ask for them.

  • Spam-filtered contact forms

    Forms carry a hidden field that bots fill in and people never see, and they ask only for what the enquiry needs.

  • Real code, no plugin pile

    The site is written as code rather than assembled in a page builder, so there is no stack of third-party plugins falling behind on patches.

  • Updates and monitoring

    The site is kept online and up to date inside the monthly fee, with its uptime monitored, so no update queue waits on you.

How it works.

  1. 01

    Built hardened

    HTTPS, security headers and form spam filtering ship with the first build, as part of the site rather than an add-on sold later.

  2. 02

    Kept up to date

    Updates go out as part of the monthly work, so the site never sits on an old version waiting for someone to find the time.

  3. 03

    Monitored and fixed

    Uptime is monitored, and anything that needs fixing goes on the shared board and gets done inside the fee.

Questions before you start.

How much does website security cost?
There is no separate security fee. It is built into every plan, starting with Foundation, the website on its own, and covered by the same monthly price. Prices are on the plans page, with no annual contract and no setup fee.
Can you guarantee my website will never be hacked?
No one honestly can. What we do is ship the site with HTTPS enforced, strict headers and filtered forms, then keep it updated and monitored. That closes the usual weak points; it is not a certification or a guarantee.
Is an SSL certificate included?
Yes. Every page is served over HTTPS as part of the hosting in your plan, and browsers that have visited are told to refuse an unencrypted connection for a year. There is no certificate for you to buy or renew.
Will the contact form stop spam?
It filters the automated kind. A hidden field that people never see catches bots that fill in every box, and the form asks only what the enquiry needs. A person typing spam by hand can still get through; no filter is total.
Who keeps the website updated?
We do, inside the monthly fee. Keeping the site online and up to date is part of every plan, so you never log in to run updates or wonder whether something has fallen behind.

Let’s make your digital work compound.

Choose a time on Gabriel’s calendar. We’ll go through where you are today, what’s slowing growth, and what’s worth doing first, whether or not we work together.

Gabriel Espinheira

Gabriel Espinheira

Senior software engineer · English or Portuguese

A focused 30 minutes, not a sales pitch.

Book a 30-min call