Skip to content
Security notice Two critical vulnerabilities in PHP itself Two critical vulnerabilities in PHP itself
Web design for aspiring Tasmanian businesses in all corners of the state.
★★★★★ Rated 4.8 on Google Request a chat

A safer, simpler way to run a small business website.

New security holes turn up every week in website software. We keep track of them so you don't have to, and act on them for every website we look after.

4.8 · Rated on Google
Chat about website security See how we solve this

WordPress security in 2025

11,334
New plugin, theme and core vulnerabilities disclosed across the WordPress ecosystem.
46%
Had no patch when they were publicly disclosed.
5 hrs
Median from disclosure to mass exploitation. 45% hit inside 24 hours.
lpi
etmp
driving-adventures
besen-family-foundation
summit-windows
dms-energy
jp-legal
easyaml
asl-realestate
muscle-up
xpress-signs
investor-planning
the-timber-yard
bb-garage
Accelerate Automative
vargiu-accountants
idd-electrical
shoreline-blinds
elite-image-events
espresso-vivo
skip-to-tip
kimtech
basc
bryland-sheds
bus-and-camper
mr-sally
highlux
brc
property-change
seventh-day-adventist-church
axess-trading
vineyard-solutions-tasmania
datawise
lpi
etmp
driving-adventures
besen-family-foundation
summit-windows
dms-energy
jp-legal
easyaml
asl-realestate
muscle-up
xpress-signs
investor-planning
the-timber-yard
bb-garage
Accelerate Automative
vargiu-accountants
idd-electrical
shoreline-blinds
elite-image-events
espresso-vivo
skip-to-tip
kimtech
basc
bryland-sheds
bus-and-camper
mr-sally
highlux
brc
property-change
seventh-day-adventist-church
axess-trading
vineyard-solutions-tasmania
datawise

Is WordPress putting your business at unnecessary risk?

Unless your business genuinely needs the functionality provided by a platform like WordPress (and most don't), you are putting yourself at real risk. With WordPress and systems like it you are gaining little and risking lots.

Read all notices

  • Malware in Rank Math PRO downloads on 16 October Critical

    Some copies of Rank Math PRO 3.0.123, downloaded or installed as an update on 16 October 2026, contained malware. Rank Math has released a clean 3.0.124. Here is how to tell whether your site is affected and what to do.

  • Two critical vulnerabilities in PHP itself Critical

    The PHP security team has given notice of two critical flaws in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, with fixes due at 1:00am AEDT on 22 October 2026. The ASD says every version from PHP 5 onwards may be affected.

  • Stolen UpdraftCentral keys used to backdoor WordPress sites Critical

    Attackers broke into TeamUpdraft, the company behind the UpdraftPlus backup plugin, took the keys that let UpdraftCentral manage WordPress sites remotely, and used them to install backdoor plugins. Here is how to check your site.

  • Adobe Commerce and Magento stores under active attack Critical

    A perfect-score flaw in Adobe Commerce and Magento Open Source is being exploited to take over online stores, and the ASD says a substantial number of vulnerable instances are sitting in Australia.

Security that starts with a review.

01

A review of your systems

We start by looking at how your website is built and hosted, what it needs to do, and what information it collects and stores.

02

Guidance on minimising risk

We explain the risks we find in plain English, and what to do about each one, starting with the ones that matter most.

03

Security and data handling

Then we put the protection in place, from hardening and updates to how your data is stored and backed up, and keep it working.

Two solutions for a safer website.

We propose a solution that fits your requirements.

Jigsaw

Move to our Jigsaw platform, for superior security, performance and reliability.

A 1:1 rebuild of your existing website onto Jigsaw, our fundamentally safer, faster and more secure platform.

  • Fundamentally safer and faster
  • Near-zero attack surface
  • Consistent sub-second load times
  • Your design and pages carried across
Typically 2 to 4 weeks
Enquire

WordPress management

If you're on WordPress, tell us about the site and we'll take a look.

WordPress asks for more upkeep. Core, the theme, and every plugin needs regular patching, and the surface for something to go wrong is broader. When we take a WordPress site on, all of that becomes ours to watch.

  • Core, theme and plugin updates, kept current on a regular schedule
  • Regular database and file backups, held off-site
  • Hardening, malware scanning and access auditing
  • A single point of contact when something breaks or needs adding

Every WordPress site is different, so we take enquiries and reply after a quick look under the hood.

Enquire about WordPress management

Built into every site we look after.

Layered protection tailored to the build. May include more secure hosting, a web application firewall, malware and file-integrity scanning, forced SSL, MFA on every admin account, and off-server backups.

On every plan

Full server management

Your site runs on infrastructure we own, tune and harden ourselves, not a shared cPanel account. Backups run automatically, uptime is watched from several points around the world, and if anything trips at two in the morning it lands in our alerts, not yours.

On every plan

Software and security updates

Your platform is kept current. On a Jigsaw site that means the delivery layer. On WordPress it means core, the theme and every plugin, on a regular schedule.

On every plan

Routine code reviews

We review your website's code regularly, looking for weaknesses and outdated components, and fix what we find before it becomes a problem.

Have a chat with us about your website's security.

Tell us about your website and what worries you about its security. We'll look at how it's set up, explain the risks in plain English and recommend what to do first.

Request a chat, it's free

  • Chat with us, it's free

    The first conversation costs nothing. If we are not the right studio for the job, we will tell you that.

  • No lock-in contracts

    Our Working Together Agreement leaves you free to make the decisions that are right for you and your business.

  • A long term partner

    We provide your website as a service. Changes are an email away, and you never need to think about servers, software updates or learning a content management system.

Crafting websites for aspiring businesses.