Best Website Security Service
-
Having been hacked twice and, it seems, still suffering from problems as a result (file changes and alterations, etc) I'm wondering if there is a good paid service that provides security for websites?
I'm an online travel agent so our websites "up-time" and search engine position is vital but I'm spending more time trying sort out our websites' security than selling travel.
It would be sensible to pay for a service that would ensure, as much as possible, that our site is secure and any optimisation we do is not cancelled out by hacking and security problems.
If anyone could recommend a good company I would be very grateful.
Colin
-
Thanks very much Matt.
-
No problem - an SSL isn't going to prevent the problem you have, but that is why I mentioned going down the route of an SSL with extras such as daily malware scanning and weekly vulnerability assessment.
Verisign would have most likely alerted you to the potential issue before hand so you could have fixed the vulnerability. Also if your site is compromised with malware it will alert you, so you can take immediate action.
As far as SSL goes; now your site has been compromised and you are acting as a travel agent you want to make sure your pages are as secure as possible and a Verisign logo will help customers trust in entering data into your site.
You will still need to make sure that you employ the help of someone who is knowledgeable on the CMS that you are using to make sure it is setup to the optimum not leaving easily exploited windows open, so to speak.
-
Most compromises of that type I've seen have been down to a flaw in either the CMS or the way it was set up (usually permissions). This type of breech is far more common that cracked passwords, servers being compromised etc. They can be annoying to track down, but are usually more easily fixed.
-
Thanks Matt. I take your point.
We've added a number of security measures to the CMS but it looks like we havent' successfully added enough.
Your suggestion to search the platform specific communities is really useful.
Cheers.
-
Just adding an SSL isn't going to help if you are having the sort of problems that you mention.
Your core issue is most likely to be with your CMS. If that is the case then you are probably best finding someone who specialises in that CMS (or generally in coldfusion) who can find the source of the problem and lock it down.
If you are using an off the shelf CMS make sure that it is up to date and fully patched. Check the platform specific communities for people having similar issues and see whether they have successfully prevented the problem recurring.
Good luck. You might just find that there is an insecure upload script or something and once you find that the problems will just end.
-
Hi Matt, thanks for replying.
I have looked at Verisign but wonder if it's comprehensive enough. (If there is such a service).
I wonder if Verisign's service would flag up or better still prevent something like my robot.txt file being altered by a malicious script?
Or whether the malicious script would not have been able to access my site if I was with Verisign?
Colin
-
Have you considered verisign - http://www.verisign.com/ and one of their SSL solutions, with extras such as
http://www.symantec.com/verisign/ssl-certificates/secure-site-pro-ev?inid=vrsn_symc_ssl_SSPEV
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
I lost traffic from my website and the rankings also gone down... What should I do?
I've started working on a project recently (for 20 days) and it got average 1800 visitors per day and the ranking were seemed good. When I started that project, I saw that there were too many plugins installed. I removed unnecessary plugins and keep the importance ones. And I started modify some pages considering SEO perspective. Few days ago I created a backlink in reddit; from where I got way too much traffic in the site at the time and the server gone down. So I have to change the server. Now I see the drastic drop down in both ranking and the traffic. I am wondering if the ranking affected when I changed the server? Or Is there any other way to check why my ranking and traffic gone down?
White Hat / Black Hat SEO | | HuptechWebseo0 -
Googlebot crawling AJAX website not always uses _escaped_fragment_
Hi, I started to investigate googlebot crawl log of our website, and it appears that there is no 1:1 correlation between a crawled URL with escaped_fragment and without it.
White Hat / Black Hat SEO | | yohayg
My expectation is that each time that google crawls a URL, a minute or so after, it suppose to crawl the same URL using an escaped_fragment For example:
Googlebot crawl log for https://my_web_site/some_slug Results:
Googlebot crawled this URL 17 times in July: http://i.imgur.com/sA141O0.jpg Googlebot crawled this URL additional 3 crawls using the escaped_fragment: http://i.imgur.com/sOQjyPU.jpg Do you have any idea if this behavior is normal? Thanks, Yohay sOQjyPU.jpg sA141O0.jpg0 -
Penalty because of logo banner in sidebar of external website?
Dear mozzers, One of our pages is not ranking (well). I wrote another question about this here on Moz. I just discovered that there is an external website that has a banner to our page in the sidebar. The banner is on every 134+ pages of that site. It is in a banner slider and only show for a few seconds every now and then. The link is not "nofollow". It seems that our page dropped from Google slightly after this banner was added. However I am completely sure about this. The link is over here in the banner carousel/slider in the sidebar: http://www.wierszowisko.com/ My questions are: Could this banner log cause a penalty for our page? If so what can we do to undo this? Ask the webmaster to remove the link? Disavow on Google? How does this exactly work?
White Hat / Black Hat SEO | | rdudkiewicz1 -
4 websites - meta titles and descriptions
I manage four separate websites/brands that all focus on the same topics and have the same achitecture. I am trying to improve each site's meta title and description, page by page, that I inherited from another before me. My question is, how different should each title/description be from one another for the same page type? Do the search engines consider this heavily in their decision process of who to show on SERPs? Am i able to simply swap out the brand name in the metas and call it done or should each meta be unique? if unique, how unique? As you can imagine, since each page is essentially the same with the same overall content and layout targeting the same keywords, it is very difficult to rewrite metas four unique ways. I greatly appreciate any advice on how you would approach this project.
White Hat / Black Hat SEO | | dsinger0 -
Sudden Drop in Website Traffic Last month
Can any one help me. One of my website http://www.imperialcard.com.au/ suddenly started to drop in traffic and ranking. I havent done anything black hat. How do I figure out what caused this. Thanks
White Hat / Black Hat SEO | | Verve-Innovation0 -
Website that just got hit....Need some tips or ideas...
Hey guys, The website of the company i work hit in the PR update two days ago . A little history , the site was notice by Google about spam links around 5-6 months ago .
White Hat / Black Hat SEO | | WayneRooney
Since then there is a company that cleans all the spam links and manage all the disavow process. In the last penguin update ( about two months ago ) the site jumped like crazy in the ranking and stayed there ever since... In the last three months we create less than ten links to the site, and we have focus all our work to improve
the optimization of the site.
It should be noted that the company is investing a lot in social networks and all the work in the past 3 month are White and clean... Now, two days ago in the PR update (more or less) the site just dropped , but when i say dropped , it's 200 keys that was in page 1-2 that just want out to page 5-6-7. Like the website is gone, i never see something like this... The things that pass through my head: A lot of the links the linking to the site with high PR lost their pr and now they are worthless, but still this drop ? its to extreme.
Or that Google received the disavow and just disavow a lot of links.... Does anyone have any ideas or tips on the subject ? Thank you0 -
Can you disavow a spamy link that is not pointing to your website?
We have submitted several really spammy websites to the Google spam team. We noticed they take a very long time to react to submissions. Do you know if it is possible to disavow a link that is not pointing to your website but rather to a very spammy website? Thanks
White Hat / Black Hat SEO | | Carla_Dawson0 -
New website :301 redirection of a established domain
Hello , I am launching a new website which would host user generated content . Based on my brandname i have purchased a new domain . In order to improve SEO rankings i was considering to purchase a good quality domain (have gr8 link backs) and then perform 301 redirection of the domain to the new brandname.co.in domain . Does this work ? Is there any harm in doing this ? . Does the Link juice pass naturally ? Warm Rgd
White Hat / Black Hat SEO | | ShoutOut0