Kenton Web Design blog
WordPress Security Basics for Western New York Businesses
By Artur Bobinski ·
Keeping your WordPress site secure doesn't have to be a mystery. Learn the practical steps I use at Kenton Web Design to protect local Buffalo businesses.
Real-World Security for Buffalo Business Owners
I have been building and maintaining websites in Lockport, NY since 2003. Over those 23-plus years and 300-plus projects, I have seen how much the internet has changed. Today, WordPress powers a huge portion of the web, including many businesses right here in Western New York. Because it is so popular, it is also a target for automated bots and hackers. You do not need to be a technical genius to keep your site safe, but you do need to be proactive.
The Foundation: Strong Passwords and User Management
The simplest way for someone to get into your WordPress dashboard is through the front door. Many people still use weak passwords or, worse, the same password for every account they own. In my experience, using a password manager is the single best thing you can do for your digital security.
- Never use 'admin' as your username.
- Use a unique, long password for every user account.
- Give people the lowest level of access they need (Subscriber or Editor instead of Administrator).
- Remove any user accounts that are no longer active immediately.
Updates are Your Best Defense
WordPress is open-source software, which means developers are constantly finding and fixing security holes. When an update for WordPress core, your theme, or a plugin is released, it often includes a patch for a known vulnerability. If you do not update, those holes stay open.
Backups: Your Emergency Safety Net
No security setup is 100% foolproof. If something does go wrong—whether it is a hack, a server failure, or a human error—you need a way to get back online quickly. A good backup strategy is non-negotiable for any Western New York business.
A proper backup should be stored somewhere other than your web server. If the server goes down or is compromised, you do not want your backups to be stuck there too. I always recommend having a daily backup routine that saves a copy of your database and your files to a secure cloud location.
Professional WordPress Care Plans
Managing all these technical details can be a lot for a busy business owner to handle. That is why I offer WordPress Care Plans through Kenton Web Design. I handle the updates, security monitoring, and backups so you do not have to. These plans are designed to be straightforward and practical.
My Essentials plan is $149/mo and includes 1 hour of hands-on help. For businesses that need more active support, the Growth plan is $399/mo with 3 hours of work, and the Priority plan is $799/mo with 5 hours. It is important to note that unused hours do not roll over to the next month, as I dedicate that time specifically to your site's health and security each month. For those running online stores, I also provide specialized Kenton Commerce Shopify plans starting at $499/mo for US and Canada based businesses.
Performance and Speed Security
Security and speed often go hand-in-hand. A site that is cluttered with old, unmaintained plugins is usually both slow and insecure. Cleaning up your site not only makes it harder to hack but also makes it better for your customers in Buffalo and beyond.
If your site feels sluggish, it might be due to these hidden issues. I offer a flat-fee WordPress speed optimization for $795. This process takes 5-7 days and involves a deep dive into your site's performance. For Shopify users, I offer a similar service for $1,095. A faster site is a more professional site, and it shows your customers that you care about their experience.
Taking the Next Step for Your Site
If you are not sure where your website stands, I am here to help. I offer a free 3-point website review to look at your current setup and identify any glaring issues. Whether you are in Lockport, Buffalo, or anywhere in Western New York, I want to make sure your WordPress site is an asset to your business, not a liability.
Securing your site is about protecting your reputation and your customers' trust. By following these basics—strong passwords, regular updates, and reliable backups—you are already ahead of the curve. If you want a professional to take those tasks off your plate, I am just a phone call or an email away.
Frequently asked questions
Do I really need to update WordPress plugins every month?
Yes. Plugin updates often contain critical security patches. If you leave them outdated, you are leaving known vulnerabilities on your site that hackers can easily exploit.
What is the difference between a backup and a security plugin?
A security plugin acts like a lock on your door to keep people out. A backup is like an insurance policy; if someone does get in and breaks something, the backup allows you to restore everything to how it was before the incident.
Can you help me if my site has already been hacked?
I can certainly look at it. Through my Care Plans or hourly services, I help Western New York businesses clean up compromised sites and implement the security basics needed to prevent it from happening again.
Want a second set of eyes on your site?
I've spent 23+ years fixing, improving and maintaining WordPress and Shopify websites. Tell me what's going on and I'll recommend a practical next step.
