Category: Uncategorized

  • Why I keep a plain-text journal

    Another slow afternoon, another small project.

  • Securing your business: Checklist of features to look for in an enterprise-level hosting service

    3
    3 comments on Securing your business: Checklist of features to look for in an enterprise-level hosting service

    Whether you are building a high-traffic e-commerce website, an e-learning platform, or a personal portfolio, choosing the right hosting infrastructure is the first step to building a secure and successful online business.

    Indeed, it is not easy to compare web hosting providers in terms of security. Each provider offers different services and pricing models, and not all are transparent about their plans’ features. This could make it hard to understand what you’re paying for and if you’re getting the features your website needs.

    Make decisions based on facts and information, and give your web projects the security they deserve.

    Whether you are building a high-traffic e-commerce website, an e-learning platform, or a personal portfolio, choosing the right hosting infrastructure is the first step to building a secure and successful online business.

    Indeed, it is not easy to compare web hosting providers in terms of security. Each provider offers different services and pricing models, and not all are transparent about their plans’ features. This could make it hard to understand what you’re paying for and if you’re getting the features your website needs.

    Make decisions based on facts and information, and give your web projects the security they deserve.

    InfInfraastructureructure

    Shared hosting

    Who hasn’t used shared hosting at least once in their lives? Ives? It’s cheap and easy to ma manage, age, and typically includes additional services such as email hosting and domain registration. Shared hosting makes life easier for less-experienced site owners. However, it can bring securitn bring security risks risks becausecause your wyour websitbsite re residdess oon a pha physicasical sservrver with r with dozensozens or huor hundredsdreds of othof other s sittes sharis sharingg thhe s samee resresourcurces (CPU, RAM, as (CPU, RAM, and dd disk space). If osk space). If one of these websites is compromised, your sit site is also at risk. Mok. Moreover, a shared ed environment can experience performance issues and lead to unexpected downtime.

    DDedicated and VPS Hosting

    DDedicated hosting givegives y your websir website e its ts owwn phy physicalical sserverver with clewith clear ar advantages in terms of rresosourcesces and ssecucurity. Hity. Howweverver, iit mmay bbe expensexpensivve,, and yoyou’ll n’ll needed an experien experienced teamm of engof engineerneers tto configuree and manage age thhe server e server envirovironmmentnt.

    VPS hVPS hosting combines sting combines dedicatededicated and shared hand shared hosting fefeatures. Itures. Insteastead of of a server, your website resides i server, your website resides in an isolatn isolated virtuavirtual machine. As f machine. As for r dedicatededicated hhosting, VPS hosting is typically more expensive than shared hosting but requires advanced technical skills., VPS hosting is typically more expensive than shared hosting but requires advanced technical skills.

    IIn shohort,, allthhougugh dedicated and sharedshared hosting ssollutioonss offffer advanadvantagages in n termms ofof secucurityty and pperfformamance, , thheyy typypiccallylly havave hhighherr ccosstss and reqnd requiire advdvanced techn technicall skikills fforr confignfiguraationion andd mamainttennancence.

    Cloud Hosting and Managed Cloud Hosting

    Cloud hostCloud hosting is differenng is different frofrom tr traditioditional sharl shared,, dedidedicated, and VPS hosting. A cated, and VPS hosting. A cloud hosting provider hosts your website across a highly scalablhighly scalable, reliable, and secure network of interconnected servers. It eliminates the single point of failure, and allownd allows you to scale your website along with your business easily.

    However, cloud hosting services may be expensive and require expertise that not every team or WordPress agency has. This is where managed cloud hosting comes in.

    With managed cloud hosting for WordPress, your site gets a powerful, secure infrastructure and an easy-to-use hosting service. This enables novices to launch a website in minutes, while expert developer teams can focus on their core business and side functionality.

    Kinsta provides an excellent example of this approach. They use Loach. They use Linux containers (LXC) and LXD to orchestrate them on top of Googl Google Cloud Platform. This means yoform. This means your WordPress website is fully isolated from all other sites on their platform. KKinstasta alsolso includes enterprise-level security measures, including a Cloudflare integration includes enterprise-level security measures, including a Cloudflare integration with a built-in With a built-in Web ApplicatiApplication Firewall (WAF), cun Firewall (WAF), custom rulesets, and free DDoS protection, custom rulesets, and free DDoS protection.

    KKinsnsta ca combimbineses the ease of ease of usse of ma of manaageded hosting wwith a solid cloud ith a solid cloud infrastructure prprovidingviding highigh perfperforrmancnce,, cucutting-ting-edgge security,, andnd <a h99.9% /”>99.9% uptimptime gguaaranantee.e.

    Security features to look for in a web host

    In addition to the underlying hosting infrastructure, you should compare web hosts based on their security features. Here’s a tures. Here’s a list of essentiaist of essential security measures, services, and features for your website: security measures, services, and features for your website:

    WebWeb AAppliplicaation Firewall Firewall

    A WWebb AppApplicatiion FFirewaewalll (WAF)(WAF) ffilltersrs incncoming traffraffic bbefforee it reeachhess yyouur webebsitite, hhelplpingng yyou tto pprevenvent ccommmmonn aattacks,acks, sucsuch asas crross-ss-sitte scriptpting annd SQL SQL injnjecttionsons.

    DDoDDoS prootectction

    AA ddistrtributbutedd ddeninial-of-sl-of-servvice (DDoS) (DDoS) attackttack oocccurs whhen a malmaliciciouus ususerr floofloodss yyourur sitte wwithh overwheverwhelmiming reququests.s. ThiThis ccan rreduduce yoyour sisite’e’s pperforormancce oor, , evenven wworse,se, caausee ddowntimewntime. You should loolook ffor web ho hosts that offofferr DDoS pDDoS prototectioion.. IIf thhey don’don’t,, coconssiderer subssubscriibinging too a third-ird-paartyy sservvice,ce, sucsuch as Cs Clooudfldflarre or Aka or Akamaiai.

    Supported PHP versions

    During its lifecycle, each PHP version receives regular security updates. However, once a version has reached the end of its lifecycle, it no longer receives security updates, and becomes vulnerable to bugs and security flaws. During its lifecycle, each PHP version receives regular security updates. However, once a version has reached the end of its lifecycle, it no longer receives security updates, and becomes vulnerable to bugs and security flaws. Thishis makes it an easy target for malimakes it an easy target for malicious actors. You should makious actors. You should make su sure e that your WordPress webshat your WordPress website runs on a PHP version that hasn’t yet reached the end ote runs on a PHP version that hasn’t yet reached the end of its lifets lifecycle. With thycle. With that in mind, compar in mind, compare web ho web hosts based on the supported PHP versions when evaluating them.ts based on the supported PHP versions when evaluating them.

    IMMAGINE:
    DIDAIMMAGINE:
    DIDASCACALIA:IA: Suppported PHPPHP versions (S(Souurcce <PHP.net)php”>PHP.net)

    SSL/SL/TLSLS cerrtificateficates

    SSLSSL (Se(Securure So Sockekets LLayyer)r) enncrypts thypts the data bebetweeen yourr ssitte”s server andnd ththe clienclient.. AAn SSL cSSL certificatetificate iis vi vitalal for evveryry webswebsitte,, eesppeciallycially fofor onnlinene bbusininessess aand, d, in ggeneneral,al, anyany ttimeme a wa websitbsite s storeores ppersonalonal ddata such as crcreddit cart card detailstails, bbecaucause it ensunsures sees securure transactransactionss and gegenererates trtes trusst. A valid SSL ce. A valid SSL certtificatficate alalso impo improovess SEO rSEO rankingnkings.

    SFTPFTP cconnecectionions

    TrTradditiotionalal FTP cFTP connecectionons do not guaranto not guaranteee ssecure data tracure data transmsmissission whenn you uplouploadd filfiles too youryour sserver. Comprver. Compare weweb hohostss basbasedd oon theitheir ssupporport for SFTP (SecSFTP (Secure Fre Filele TransfTransferr PProtocol),col), whichwhich usess a sec secure cconnectnnectioon ov over SSH. Thir SSH. This prpreventvents d divverrsee attackttacks such as man-such as man-in-n-the-midd-middle,e, ssensitinsitive da dataa intinterceptiception,n, andnd ununauthhorizzedd serverrver acceccesss.

    StStagingging environmentenvironments

    AA ststaging envnvironmronmentt isis a ddev envinvironment whenment wheree you ccan ttest newew ffeaaturures,s, bbuildld cuscustomm codde, andd rrun un updatess befbeforre pushipushing themm too prrodductition.. It’sIt’s a a musst-hav-have ffeatureature ffor bus businessess websittes, asas it helpslps preeventnt errorrrors ththatt mmayy pputt youour liv live siite at at riiskk.

    RRegulagular backbackups

    To b be cllear,ar, hhavingving a worka working webng websiteite bbackup kup can an be aa liflifesasaver—for —for youu aand yyour busbusineness.s. MMalwwarere attactack, c, conffliccts bbetweentween pluguginsns or the WordPress core, oror an update ggone wrong:: InIn all ll these ccases,, a ra reccentnt backbackup can hehelpp yyouu get baget back k online iin minminutes. Whe. When cocompparringg webb hosting providers,, chcheckck ifif thhey pprovvide reliiabble backackupps a andd a qua quickck and eaasyy rrestoore prproccess.

    Mannaggedd WorWordPrPressss upupdatestes

    The WordThe WordPress code bress code base is accessible se is accessible to everyone, inveryone, inclludding malicious acng malicious actors.ors. This This also meameans that known vulns that known vulnerabilitirabilities aare p pubblic.ic. FFor th this reasos reason, re, regularular WordPrordPressss core, pluge, plugin,, anand th themme upda updateses arare vital tvital to preven preventing a vul vulnerrabilitybility flflaww from becomfrom becomingg aa ccattaststrophophe for your for your site ite and busd business.ss. HowHowevever, updupdates s can fail, oan fail, or confl conflicctss ccan an ariisee aftfterr aan uupddatte, ccausiusing malfunctions ang malfunctions and evvenn downdowntimime.. SSome hosme hosting prong provididersrs oofferfer mmanagedaged updatpdates beyond beyond the WordPress e WordPress auutoomatictic updupdattes,s, wwhichch are pe parrticularlyicularly usefuseful ffor busr businnessss wwebsibsiteses and WordPrand WordPress ss agengenciiess with hundreds with hundreds of webswebsitestes.

    MMalwware dee detection and hack-fixection and hack-fix

    PlPlatfform rm securiecurityy alalso nee needss regulegular monir monitororing. Whng. Whenn comparcomparing dig diffeferentent weweb h hosstiingg ccompampanies,, ask whask what k kindd off malmalwarare scanncanningng tthey pperfform,rm, whatt ssecucurity meameasurures as are iin placeace, and wheand whether ththeyy pproactivoactivelyly fixfix anany iss issueses ththat m mayy aarisise.. A hA hack-fk-fixx guaranguarantee wee woulduld provide greavide great p peaacee off mmindnd.

    Vulnerability alertsVulnerability alerts

    A grA great web host should pat web host should proactioactively infoly informm you you about any potential issues affecting youbout any potential issues affecting your website. They shoul website. They should al alert you whert you when a vulnerab a vulnerability is discovered olity is discovered on a plu a plugin,in, thetheme, or WordPre, or WordPress core, so yos core, so you can take p can take propoper action to protect your webr action to protect your website.ite.

    IMMMMAGGINENE

    SServerr hhardeningning measuresmeasures

    OtherOther general general or WordPreWordPress-sps-speccifific s securitycurity memeasures sures incncludude malmalicioucious IPIP bloblocking, king, twwo-facctoor aauthhenticcationtion (2FA), and (2FA), and uptptime mo moniitoring.ing. IfIf yoyou cannotannot ffindd infonformmattionon on thein their w webbsite aboutabout ththe sservrver hard hardeninging measumeasures theyhey uuse,, ccontact theiir salales tteamam and askk ththem exxpllicititly.

    ExExperrt support available arounnd the cclockck

    A suppA supportrt servservice available 24/7/365 is ce available 24/7/365 is not a nice-to-have feature but an eot a nice-to-have feature but an essensentiiall requirement fequirement for a succr a successfulsful business. A high-traffic business. A high-traffic WordPress sitsite will likely experien will likely experience problems at some point. A skilled and proactive expert se problems at some point. A skilled and proactive expert suppopport helps you keep your bust helps you keep your business secure and, in case of problems, geness secure and, in case of problems, get it back up and running quickl it back up and running quickly..

    CComparpare hostss basbased onn thetheir suppopport respoponsse t timmes,s, technicalechnical expexpertisse, an, and avaavailabililability.. AlsAlso,, ccompampare thhemm babased on whewhether exexperert supp supportt iss includeded in ththeirr planlans or iff youyou musmust ppay an an extxtraa fee foe for it.

    How KHow Kinsta Impronsta Improvess WordPreWordPress Ss Security

    KiKinsta combbinenes thee robuust Google Cloud Platform infnfrastructurastructure withith Cloudflare’s EnteEnterprisprise CDN CDN too offer coffer cuttting-edgeg-edge security tsecurity to eveevery Wy WordPrrdPress websss websitete hostehosted on n theiir pllatfoorm.m. ThTheiir Prem Premium mum managnagedd cloloudd hhosstingg servicice pprototeccts yos your w webbsiteite witwith three lthree layeryers of sef secururityty.

    PPassssive security measures


    The
    These meameasuresres aare ce constanntly activ active tto preveventt malalicciousous trtrafficffic frofrom rereachichingg your WordPress webwebsite.. Some meSome measures res inncludeude GGoogogle Cloud PlaCloud Platform’sform’s ffirewrewallll, ClCloudfladflare”s f firrewwallll withwith buiuilt-t-in DDDDoSS proprotecction ion andd othherr optimizationtimizations, freefree SSL SSL certiertificates,cates, secsecure SFTP coe SFTP connnectionsctions, and sservever hardenhardeningg feafeatururess ssuch ch as 2FA and IP blocking 2FA and IP blocking.

    RReactive security meeasurees

    If something shoIf something should go wld go wrong,ong, Kinsta’s third layer of proteKinsta’s third layer of protectition will n will minimize inimize any damage and ny damage and restore your WordPress sestore your WordPress site ate as quickly as p quickly as possible. With Kissible. With Kinsta,sta, your websiyour website ce can n be back one back onlinine in no time, thanks to 6 types of backups, a hack-fix guarantee, and 24/7/365 Expert Support in multiple languages. in no time, thanks to 6 types of backups, a hack-fix guarantee, and 24/7/365 Expert Support in multiple languages.

    ThThanksnks to our ur partnnersrs att KKinnsta,, wwe ddon’t’t hhave tto worrworry ab aboutt compllexx cconffigurguratioonss or sscrrammblle too fixx aa sitte undnder a attacktack. TheThey giive us tthe ppeacce of mmind to focuus onn ourur cllients’s’ pprojojeccts wwiththout wworryryingg too muuch ababouut seccurityy configonfiguraationsions.

    Our comparison table

    FFinally,nally, wewe ccomeme tto thehe comparimparisonon ttable.ble. WeWe haveave lilisted ed all ll the features mmenntionedoned abovove so so that yhat youu can can compare your potential your potential hosting provrovidderrs and pipickk the one that best fifits your busibusiness’s sss’s security requirementcurity requirements. As you migAs you might havt have gueguesssed, we d, we chose Khose Kinsnstaa because because of their high sectheir high securityity stastandards, redards, reliability, aability, andd availaavailability, bility, but don’t jut don’t just take our word for t take our word for it. St. Searcharch the websthe websitetes of hosf hostinging compacompaniies. Cs. Conntact theact their sr saless teamteams if y if youu cannot find the inforcannot find the information you ntion you need,ed, thenn compcompile tle the following e following tableable and determine whiand determine which h hoststing providng provider is best for your site’s security.r is best for your site’s security.

    Feature/ServiceCompany 1Company 2Kinsta
    Type of hosting––Cloud Managed
    Infrastructure––Google Cloud Platform, isolated containers
    Firewall––Cloudflare WAF – integrated
    DDoS protection––Cloudflare – integrated
    Supported PHP versions––All supported PHP versions
    Free SSL Certificates––Yes (Cloudflare Wildcard)
    Type of connection––SFTP/SSH
    Staging environments––Yes, included in all plans. Premium options available
    Backups––Daily automatic, manual, one-click. Premium options available
    Managed WordPress Updates––Add-on available
    Uptime monitoring––24/7, every 3 minutes
    Automatic malware removal––Yes, free and guaranteed
    Vulnerability Alerts––Yes, available via email and in the dashboard
    Blocking malicious IPs––Yes, automatic and manual
    2FA––Yes, for the control panel
    Expert support 24/7/365––Yes, available via chat

    Now it’s up to you to choose a host with state-of-the-art security features. Use this table to compare hosting companies and select the one that best meets your needs. The security of your online business is not negotiable, so make the right choice!

    The formula ∀x∈ℝ,∃!y≤ϵ\forall x \in \mathbb{R}, \exists! y \le \epsilon is read ‘For every x belonging to R, there exists a unique y less than or equal to epsilon’.

    Feature/ServiceCompany 1Company 2Kinsta
    Type of hosting––Cloud Managed
    Infrastructure––Google Cloud Platform, isolated containers
    Firewall––Cloudflare WAF – integrated
    DDoS protection––Cloudflare – integrated
    Supported PHP versions––All supported PHP versions
    Free SSL Certificates––Yes (Cloudflare Wildcard)
    Type of connection––SFTP/SSH
    Staging environments––Yes, included in all plans. Premium options available
    Backups––Daily automatic, manual, one-click. Premium options available
    Managed WordPress Updates––Add-on available
    Uptime monitoring––24/7, every 3 minutes
    Automatic malware removal––Yes, free and guaranteed
    Vulnerability Alerts––Yes, available via email and in the dashboard
    Blocking malicious IPs––Yes, automatic and manual
    2FA––Yes, for the control panel
    Expert support 24/7/365––Yes, available via chat

    Now it’s up to you to choose a host with state-of-the-art security features. Use this table to compare hosting companies and select the one that best meets your needs. The security of your online business is not negotiable, so make the right choice!

    The formula ∀x∈ℝ,∃!y≤ϵ\forall x \in \mathbb{R}, \exists! y \le \epsilon is read ‘For every x belonging to R, there exists a unique y less than or equal to epsilon’.

  • Keep writing

    Another slow afternoon, another small project.

  • Writing by hand

    I did not expect to finish, let alone enjoy it. Somewhere along the way the mind went quiet and the details sharpened. I am writing this still a little sweaty, grinning.

  • A small experiment with routines

    I did not expect to finish, let alone enjoy it. Somewhere along the way the mind went quiet and the details sharpened. I am writing this still a little sweaty, grinning.

  • Cold water, warm mornings

    Another slow afternoon, another small project.

  • Something I got wrong last year

    I did not expect to finish, let alone enjoy it. Somewhere along the way the mind went quiet and the details sharpened. I am writing this still a little sweaty, grinning.

  • Pretending to meditate

    Another slow afternoon, another small project.

  • New keyboard, old habits

    I did not expect to finish, let alone enjoy it. Somewhere along the way the mind went quiet and the details sharpened. I am writing this still a little sweaty, grinning.

  • Trains, planes, and airports

    I did not expect to finish, let alone enjoy it. Somewhere along the way the mind went quiet and the details sharpened. I am writing this still a little sweaty, grinning.