We consider keeping your site safe our responsibility. If your site is hacked on our watch, our incredible team of WordPress experts will quickly and carefully remove the malware for you. Free of charge. No questions asked.

Here are the details on how we keep your site safe:

WordPress core files are locked down

One of the great things about WordPress is that everything is built around the same core software. This allows plugin and theme authors to create awesome tools and designs that can be used by anybody running WordPress.

One of the not-so-great things about WordPress is that the common core used by millions of sites can allow the quick spread of infection and damage.

On our servers, nobody can overwrite your WordPress core files.

Everything in your WordPress install is locked down tight, aside from your custom content. Does somebody want to edit your wp-config.php file in order peddle creepy products on your site? Not on our watch!

It is worth noting that locking down core files means you can’t edit them either. This is a good thing because it’s best practice to leave core files alone as they’ll get swapped out in WordPress updates. You don’t want hard work getting wiped out every time WordPress is updated (quite often). If there are files like wp-config.php that you’d like to make changes to, just let our team know and we’ll make those for you! Unlike manual edits, these will carry over from update to update.

Intelligent IP blocking

Intelligent IP address blocking detects intruders and blocks them across all sites on our servers within seconds.
We monitor popular points of entry for hackers and immediately lock out any IP address trying to get through. These points include:

  • Failed SSH Access Attempts
  • Failed WordPress Login Attempts
  • Spam WordPress Comments
  • XMLRPC Connections (which we fully block by default)

We use a variety of techniques to block traffic starting with preventing known malicious IP addresses from opening a session with the server, which is a very severe and immediate action. Another softer layer of security we provide is our proprietary caching ban. This method detects “banned” access attempts and displays a cached page to the visitor stating that their connection has been banned. This method stops the connection at the highest layer of our servers software stack and utilizes the fewest server resources while still presenting a user-friendly response.

In the rare occasion that a client has forgotten their password and keeps trying dozens of time in just a few minutes, they’ll see a ban page but will be presented with easy, on-screen instructions to get their IP un-banned.

Since banned IP information is shared across sites, we develop a kind of “herd immunity” to malicious actors in real time as the attacks come in. So your site’s protected from hackers before they even try to attack your site.

Insecure passwords? Not on our watch.

Although it may not seem like a big deal, having hard-to-guess username and passwords really goes a long way on WordPress. Due to the uniform structure of WordPress, a lot of web bots will crawl across websites, simply appending a /wp-admin to the domain name. If the page loads, the bot will start trying username and password combos starting with some of the most common insecure passwords. So if you have a user named admin and a password of password1234, you’re at a pretty high risk of getting hacked.

That’s why we go to great lengths to ensure that our customers use strong passwords. If you try to create a new password that doesn’t make the cut, we’ll let you know.

Limited Login Attempts

One of the things we do to protect customers from malicious attacks is limit the number of login attempts from a single IP address to three attempts within twenty minutes. If you type the wrong password three times, you must wait to try again.

This goes a long way to deter would-be attackers, as they can no longer just try hundreds or thousands of passwords and try to brute force your account.

Limit Login Attempts works at an IP address level, so if you have multiple users trying to sign in to your site on the same network, they can easily wind up locking each other out, since Limit Login Attempts will only view them as a single user and will count each of their individual failed logins against the overall total allowed, and lock all users out if the limit is exceeded.

If you are locked out from too many failed login attempts, just send us an email and we will clear your IP address so you can get back in.

Automatic WordPress updates

In order to prevent outsiders meddling with your stuff, we make sure your site is running the latest and greatest version of WordPress. These updates often include security patches, which close any doors and windows that hackers may have found in previous versions. We make these updates for you automatically and usually happen within a few days of their release.

Malware Monitoring

We pride ourselves on keeping the bad guys out of your site’s files and database through the preventative security measures mentioned above. That being said, malware prevention is an ongoing cat and mouse game where systems have to react and adapt to the ever-changing security gaps introduced by third-party plugins, third-party themes, or weak passwords.

In the event that you find your site has been compromised by a plugin or theme vulnerability, we can jump in right away and get to work cleaning up the infection. We’ll also notify you of our progress along the way.

If we learn of a wide-spread malware vulnerability within a particular plugin, we will update the plugin or disable it and notify you of the issue.

Harbor Care
$47 / Month

For organizations who need all technical aspects of their website covered. Focus on your business, we’ll cover the website.

✅ Dedicated Web Captain
Q

Dedicated WordPress Manager

You'll be assigned a dedicated point of Contact called a "Web Captain". You can call or text your Web Captain any time during business hours, Monday through Friday, 9 am to 5 pm. It's the fastest way to reach them. If your Captain is unavailable, one of our other talented Captains will jump in to make sure you are promptly helped! Learn more here.

✅ Fully Managed Hosting
Q

Fully Managed Hosting

Our Managed Hosting is 100% “done-for-you”. If you’re a non-technical business owner or organization director who never wants to think about web hosting again, then we are for you. Our infrastructure provider is Digital Ocean and we maintain a 24/7/365 server admin team. Learn more about Fully Managed Hosting.

✅ 24/7 Emergency Support
Q

24/7 Emergency Support

Your website is mission-critical! Your team at WP harbor is on call 24/7, 365. We monitor your website by pinging it every 60 seconds. If it fails to respond, our team is alerted and we go to work restoring it. Our regular office hours are Monday-Friday, 9-5 pm, EST. Outside of those hours, we offer on-call email, live chat, and phone support. Learn more about how we support your website here.

✅ Website Security
Q

Website Security

Keeping your site safe our responsibility. Learn about what we do to protect your website. If your site is hacked on our watch our incredible team of WordPress experts will quickly and carefully remove the malware for you. Free of charge. No questions asked.

 

✅ Free Malware Removal
Q

Free Malware Removal

We consider keeping your site safe our responsibility. Click here to learn about what we do to keep your site safe. If your site is hacked on our watch our incredible team of WordPress experts will quickly and carefully remove the malware for you. Free of charge. No questions asked. Learn more about free malware removal.

✅ Dual Cloud Backups
Q

2x Cloud Backups

We make sure your important data is safe and secure. We back up your website nightly and weekly, with each backup type being stored on separate remote servers for an added layer of protection. 

Back up 1: Nightly, stored on the "nightly" remote cloud server, saved for 30 days
Back up 2: Weekly, stored on the "weekly" remote cloud server, saved for 30 days

At any given point, we have up to 35 copies of your site! If you need us to roll your site back to a different version, just reach out to your Web Captain. Learn more about cloud backups here.

 

✅ Spam Prevention
Q

Spam Prevention

We'll install AKISMET, a premium anti-spam plugin (included at no extra cost), and configure it to protect your site against spam comments and spam web form submissions. Learn more here.

✅ Site Migration
Q

Site Migration

We'll take care of everything! After you sign up, you'll complete a short onboarding form and your dedicated point of contact (Web Captain) will take care of everything from there! We'll migrate your site and even take care of DNS updates for you!

✅ Essential SEO
Q

Essential SEO

We want to make sure our customers are set up for success! When you have Harbor Care, we'll provide these essential SEO best practices:

  • Instal Google Analytics
  • Set up Google Search Console
  • Submit an XML sitemap to Google
  • Optimize your site to load as fast as possible
  • Ensure your site is has an SSL certificate enabled

To read more about this, click here.

✅ Optimized For Speed
Q

Optimized For Speed

Site speed and load time factor into everything from search engine optimization, to bounce rate, and conversions. It might be something you never thought much about before. It’s one of those things we love to think about so you don’t have to! Click here to learn how we make your site faster. 

✅ Premium Plugins
Q

Premium Plugins

We provide access to a suite of premium plugins that are commonly needed by small businesses. You can use them to:

  • Accept credit cards payments
  • Create Online Forms, Applications, and Contracts
  • Capture Electronic Signatures
  • Integrate with Facebook
  • Integrate with Instagram
  • Display Event Calendars
  • A/B Split test lead capture forms
  • Optimize Website Speed

Click here for a full list of the premium plugins that are included with our service.

✅ SSL Certificates
Q

SSL Certificates

An SSL certificate creates an encrypted connection between your website and the user who is accessing it. In the past, only websites processing credit card information were required to have an SSL certificate, and technically, that’s still the case.

However, Google has been pushing hard for all websites to have an SSL certificate and in 2014 they announced they would be giving preference in search results to websites with an SSL installed.

Next, in 2017 Google announced they would be flagging websites without an SSL as “Not Secure” and Firefox followed suite.

We install an SSL certificate and verify it is working correctly on all websites that we manage. Learn more about how we protect your website here.

✅ Visitor Analytics
Q

Visitor Analytics

We set up your website with Google Analytics and Google Search console. This is not only important data to collect, but connecting your website to Search Console (and submitting a site map, which we'll also take care of for you) falls under Search Engine Optimization best practices.

✅ Status Monitoring
Q

Status Monitoring

Most web hosting companies consider it their job to provide hosting space, and that’s it. Whether your website is actually up and running properly is not their job. They just provide the hosting space. We actively monitor your website to make sure it's up and running. And if it goes down. We fix it. Learn more here

 

✅ Plugin/Theme/WP Updates
Q

Plugin/Theme/WP Updates

Plugin, Theme, and WordPress core updates occur periodically and are required to keep your site running safe and secure. Failing to update can leave your site open to hackers and security threats. We check your site and complete updates every two weeks as part of our service to you! Learn more here.

✅ Custom Code (À La Carte)
Q

Custom Code

Get access to our expert team for à la carte web design and development. Let your Web Captain know what you need and we'll provide an estimated cost based on the time required to complete the work. We only charge for the time it takes to complete the work. No rounding or minimum increments.

If you want "all you can eat" website edits for a fixed price, check out our Harbor Edits plan.

Harbor Edits
$167 / Month

Everything in Harbor Care plus unlimited website edits!
Read more about Harbor Edits.

✅ Everything in Harbor Care
Q

Everything in Harbor Care

Harbor Care is a WordPress service for business owners that goes beyond anything available on the market today. Harbor Care provides Small Business Owners with everything they need to run a WordPress website including...

  • A Web Captain (Dedicated Website Support)
  • Premium Hosting
  • WordPress Management
  • Commonly needed premium plugins (like Gravity Forms and Smash Baloon)
  • Divi Theme

Sign up here!

 

✅ Unlimited Edits
Q

Unlimited Edits

Every website needs edits from time to time. Harbor Edits is geared towards existing sites that need content on existing pages updated or changed on a regular basis. Examples of what we consider edits include:

  • Changing or updating text and images on existing pages
  • Adding new blog posts that you’ve provided all the content and formatting for
  • Creating simple text-based pages
  • Updating your website navigation menu
  • Changing or updating image sliders

Read more about Harbor Edits.

✅ Custom Code (À La Carte)
Q

Custom Code

Get access to our expert team for à la carte web design and development. Let your Web Captain know what you need and we'll provide an estimated cost based on the time required to complete the work. We only charge for the time it takes to complete the work. No rounding or minimum increments.

If you want "all you can eat" website edits for a fixed price, check out our Harbor Edits plan.

Custom Services

Need something that doesn't fit into a plan?
We offer custom solutions for every need.

E

Web Design & Development

We provide everything from custom coding in both front and back end languages, to third-party API integrations.

E

Email Accounts

We provide custom email accounts and administration of GSuite and Office 365 hosted email.

E

Domain Management

Get unlimited DNS updates and support along with annual renewals and domain privacy.

FAQs

What makes you different? Why should I work with you?

Our commitment to service and the value of our products goes beyond anything available on the market today! If you have any doubts about this, please call me, Chad Lawie, owner of WP Harbor. You can reach me at 800-407-1114 or book a virtual meeting with me.

What is your response time?
You'll be assigned a dedicated point of Contact called a "Web Captain". You can call or text your Web Captain any time during business hours, Monday through Friday, 9 am to 5 pm. It's the fastest way to reach them. If your Web Captain is unavailable, you can call the main number: 800-407-1114. We reply to all emails within 1 business day.
Do you offer phone support?

Yes! Absolutely! We’re here to serve you via video meeting, screen share, text, and email support! Feel free to call us at 800-407-1114.

Do you offer 24/7 support?

We monitor email and voicemail 24/7, 365. If you have a mission-critical (website down) issue, you can send a text message to your dedicated Web Captain. 

How do I get my site to you?

We'll take care of everything! After you sign up, you'll complete a short onboarding form and your dedicated point of contact (Web Captain) will take care of everything from there! We'll migrate your site for you and even take care of DNS updates for you!

Do you have a free trial?

We want you to be 100% confident when you sign up for our service. If you're feeling unsure, why don't you call us at 800-407-1114? Or you can click here to schedule a meeting with Chad Lawie, the owner of WP Harbor. But to answer the question, no, we don't have a free trial.

How do I get unlimited edits?

Harbor Edits includes making any edits you need to your existing website. "Edits" are changes that can be made without using custom code. This includes editing pages, adding posts, updating information, changing menu items, adding plugins, changing slider photos/info, etc. Learn More Here!

Do you offer multi-site discounts?
Not at this time.
Do you work with 3rd party systems and integrations?

We sure do! If you're on our Harbor Edits plan, we can set up simple integrations, for example, digital marketing tracking codes, or chat widgets, along with integrating other WordPress plugins. 

If you need something more advanced. Like API integration with SalesForce, YachtWorld, or an MLS, we can provide you with a custom quote.

Do you offer custom web design and development?

Absolutely! We've built hundreds of websites over the years, including some for names you probably know, like the Hollywood Walk of Fame. You can read all about it here.

Where is your team located?

The majority of our team is based on the west coast of Michigan. However, we have staff located across the United States and around the world!

What happens if I cancel? How Do I cancel?

If you decide you no longer want to work with us, we will transfer your files and assets over to you. Any plugins that have been added to your site as part of our service will be removed. Plugins are licensed to WP Harbor and can only be used by clients with whom we maintain an ongoing relationship. To cancel services click here.

 

Have Questions? Book a call with
WP Harbor Founder Chad Lawie.​

Have Questions? Book a call with WP Founder Chad Lawie.​