We checked our own website with our own scanner. Here’s what we fixed.
We ask you to keep your devices and accounts up to date, so we hold our own site to the same standard. This week we reviewed mydigitalsecurity.pro top to bottom, ran it through the same website check you can use for free, and closed every gap we found. This was routine maintenance, not a response to an incident.
What we fixed
- Every add-on is up to date. Our site runs on WordPress plus a set of add-ons, and several had newer releases with security fixes. We installed all of them. Out-of-date add-ons are the most common way websites get broken into.
- Your browser now gets more protection from us. It always uses an encrypted connection to our site, refuses to let other sites hide our pages inside theirs (a trick called clickjacking), and shares less about where you came from when you follow a link away from us.
- We stopped advertising version numbers. Attackers search the internet for sites running a version with a known weakness. We no longer tell them which versions we run.
- Setup and backup files are locked away. Files that only exist to help us run the site can no longer be downloaded by visitors.
- Backed up first, checked after. We took a full backup before each change and checked every important page after it.
Do the same for your own website
If you run a website for your family, club or business, these three steps cover most of the risk:
- Turn on automatic updates for your website software and its add-ons, and delete any add-on you no longer use. Switched-off add-ons can still be attacked.
- Run a free website check. Our website check looks at your site the way a visitor does and tells you, in plain language, which of these protections are missing and how to add them.
- Keep a backup somewhere else. A backup stored only on the website itself disappears along with the website.
Questions about your own setup? Get in touch. We’re happy to help.