Routine updates
WordPress core, themes and plugins in agreed maintenance windows, with a process for urgent vulnerabilities and software that cannot safely be updated.
EXP Frontier / Done-for-you security
Security work.
Taken care of.
We secure and maintain the website your business depends on. From overdue updates to the data behind your forms, EXP owns the implementation.
01 / Establish the foundationsStabilize
Stabilize
+ Secure
02 / Keep the work movingOngoing
Ongoing
Protection
From finding to finished work
An action list
with someone to do it.
Security advice only helps when the changes happen. EXP implements the agreed work, checks critical journeys and keeps an evidence record you can understand.
Implementation by EXPChanges checkedRegular reporting
The core service
Keep the foundations
and the details in order.
A defined scope across the software, access and data your site depends on. We agree what is supported before taking responsibility for it.
Safe changes
Staging where supported, recovery points, verification and a rollback route. We check agreed critical journeys as well as whether a page loads.
Baseline hardening
Administrator access, supported hosting settings, exposed files and unnecessary software. Agreed changes are implemented and recorded.
Forms & lead data
Supported Gravity Forms, WPForms, Contact Form 7/Flamingo and qualified IDX integrations: where records persist, who can access them and where test enquiries go.
Recovery checks
Backup status, access and the agreed restoration steps. A backup file alone does not establish a working recovery process.
Ongoing follow-through
Configured protection and alerts, scheduled upkeep and a record of completed work. Service hours and escalation arrangements are explicit in the plan.
More than managed plugin security
The upkeep is
part of the work.
Wordfence Care and Response provide managed WordPress security. Their current service agreement excludes routine updates to WordPress core, themes and plugins other than Wordfence.
EXP’s proposed scope includes those routine updates, plus staging where supported, verification, rollback and checks of agreed forms and lead flows. These are distinct implementation responsibilities.
AI-assisted. EXP accountable.
Judge the work
by what changed.
We use automation and AI to help investigate failed changes, draft remediation and regression checks, and make test-data enquiry checks more efficient. EXP reviews the outputs and owns the agreed implementation.
- What we changed, and why.
- Which page and lead-flow checks passed.
- Which backups and recovery steps were checked.
- What remains open, with the next action.
Need to investigate a deeper weakness?
Make testing
part of the plan.
Our Penetration Testing area brings together application and API testing, reviewed evidence and the EXP Portal. It can complement your ongoing protection scope.
Explore Penetration Testing