Security Overview
Protection runs underneath your site, not in front of it
A single breach ruins more than your uptime, it destroys your revenue and reputation. While others rely on slow security plugins, Pladium builds enterprise-grade protection directly into the server so your site is secure by default.
Hardened infrastructure
Our network-level firewall and DDoS filtering stop attacks before they ever reach your server.
Always-on monitoring
Sites are continuously monitored for suspicious activity. If we find something, we remove it.
Complete account isolation
Every account runs in its own container, so a compromise next door never reaches yours.
Security is built into the infrastructure
Four layers sit between the internet and your site, and all four are ours to look after. You don't configure any of it, and you can't switch it off by accident.
Proactive threat defense, engineered by Pladium
Backed by enterprise-grade Imunify360 architecture to filter malicious traffic, stop DDoS attacks, and isolate threats before they can reach your server.
Plugins updated for you
We update your core, plugins, and themes overnight, automatically testing your layout against a visual snapshot. If anything breaks, we revert it instantly.
- Today, 03:00 Files and database
- Yesterday, 03:00 Files and database
- Restore any point Kept off site
Backups every day
We automatically save a full, off-site copy of your site every night. You can roll back to a previous version yourself with one click, or ask our team to handle it for you.
Daily backups
Malware removed during migration
If we detect malware while moving your site, we will clean it up for free. Start your new hosting experience with a completely safe and secure baseline.
Add what your business is required to prove
The protection above is part of every plan. What follows covers the cases where you need documentation, longer retention or a certificate that names your organisation.
SSL Certificates
Domain, organisation and extended validation certificates, issued and installed for you. Basic encryption is already on every site, so this is for when you need a certificate that names your organisation.
Acronis Disaster Recovery
Acronis-based backup and recovery with longer retention than the standard daily copies, plus full system restore rather than file-by-file. We set it up and maintain it.
Domain Guard Protection
Four layers guarding the name itself: registrar and transfer locks, DNS security with DNSSEC, ownership verification, and two-factor authentication on domain changes.
GDPR compliance tool
Cookie consent banner, preference management by category and a record of every consent given, so your own visitors get the same treatment the law expects. Deployed and configured with you.
VPN and private networking
A zero-trust mesh network for connecting your team to internal systems without opening them to the internet, and a privacy-focused VPN for personal use.
Trustpilot
Ready to talk Security
Whether you need the DPA for a procurement review, want to know what runs at the server layer, or are working out which plan fits, you'll speak to someone who runs the platform.
Engineers who run the platform
Speak with the people who patch the servers and answer the abuse reports, in your language, not a support tier reading a script.
Support without handovers
Your request is answered by an engineer rather than passed between tiers. Available 24/7 by chat, email and ticket.
Frequently asked questions
Can't find your answer here? Our engineers reply personally, usually within hours.
Isn't security supposed to be included already?
Yes, and it is. Everything on this page down to the layers diagram comes with every plan at no extra cost. We don't sell a security add-on that switches on protection you'd otherwise go without. The things listed under "what you can add" are separate products rather than upgrades to the baseline.
Do you scan for malware on the cheapest plan?
Yes. Scanning and monitoring run on every account regardless of plan, because on shared infrastructure one compromised site affects everybody else on the machine. What differs by plan is how much of the tooling you can drive yourself, and how fast we respond when you raise something.
What happens if my site gets hacked?
Contact support and we start immediately. We contain the compromise, identify the entry point, clean the affected files or restore from a clean backup, then close whatever let it in. Recovery work on an already-compromised site is quoted per incident. Detection, containment and the conversation are not charged separately.
Can I use my own security plugin as well?
You can. Application-level security plugins duplicate work already happening below them, and heavy scanning plugins are one of the more common causes of a site hitting its resource ceiling. If you want one for the reporting or the login controls rather than the scanning, that's usually the sensible way to configure it.
Where exactly is my data stored?
In Tier III data centres within the European Economic Area, with encrypted backups held both locally and off site inside the same region. Where a third party processes data outside the EEA, the transfer is covered by Standard Contractual Clauses or an adequacy decision, and that party is named in the sub-processor list attached to your data processing agreement.
Do you offer a DDoS protection guarantee?
Volumetric attack filtering runs upstream of our network as standard. We don't publish an absolute guarantee, because any provider claiming to absorb an attack of unlimited size is describing marketing rather than physics. Our uptime commitments and the remedies attached to them are set out in the Service Level Agreement.
Security you don't have to buy separately
Every layer on this page comes with the hosting. Pick a plan and it's already running when your site goes live.
30-day money-back guarantee • 99.9% uptime SLA • LiteSpeed powered
30-day money-back guarantee • 99.9% uptime SLA • Redis and NVMe on every plan