Security and CDN
Your site protected and fast from day one.
The CDN, DNS and attack filters are included in every plan and work in front of your site.
The network
Our own CDN, with 8 nodes in Europe.
Your pages and files are served from the node closest to the visitor. Network and DNS are ours: you don't buy them from another provider.
The defences
What protects you, in layers.
Network attack protection
Servers have the network provider's anti-DDoS protection, and the CDN absorbs abnormal traffic in front of the site.
Bot and abuse filtering
Suspicious visitors are challenged or blocked before reaching your site. Genuine search engines always get through.
Rules against the most common attacks
Rules on the request address and headers block scans and known attempts. A complete WordPress firewall is coming soon.
Login-attempt blocking
Anyone who gets the password wrong too many times is stopped automatically.
File scanning
An antimalware scans your site's files and flags suspicious ones.
HTTPS everywhere
Traffic is encrypted and the old http address is redirected to https.
In practice
What you see, and what you don't.
What happens by itself
- Certificates issued and renewed
- Blocking of abnormal logins and scans
- Serving your site from the nearest node
What you decide
- Which nodes serve your site (even EU only)
- When to switch on «under attack» mode
- Which countries to allow
FAQ
Security questions
How often are backups made and how long are they kept?
Backups are daily, kept on a different server from your site, and you can take one on demand (on Grow and Geek). We write the retention period into the terms and on the Technology page before launch.
Is SSL free? Do I need to renew it?
SSL is included in every plan and renews by itself: you don't have to do anything. Traffic is encrypted and the old http address is redirected to https.
Does the site stay online during an attack?
The CDN and network defences absorb most attacks, and suspicious bots are challenged or blocked. Nobody can guarantee 100%: if you need more, Cloud has reserved resources.
My site was flagged for malware: what do I do?
Write to us right away. Meanwhile update WordPress, plugins and themes, change the passwords (including the admin's) and restore a backup from before the infection. An antimalware scans files and flags suspicious ones.
I got an email that looks like yours about an invoice or domain: is it genuine?
If in doubt, don't click the links. Go straight to the client area by typing the address yourself: if there's an invoice or notice you'll find it there. We will never ask for your password by email.
Where is my data? And GDPR?
On servers in Europe, in France. You can also ask for your site to be served only from European Union nodes. Before launch we publish terms, privacy and a data processing agreement (DPA). See the Network page.
Why was my site suspended?
There are two reasons: a payment that didn't go through, or abuse such as malware or spam sending. In both cases we write to you first and you can sort it out from the client area or with support.
I see «403 Forbidden» or my IP address is blocked: why?
It usually happens after too many failed login attempts, which the server blocks to protect your site, or because of a wrong permission on files or folders. Write to us with your IP address and we'll check.
Want to see how we stack up?
In the comparisons we put our technology next to the others'.