Website Security Monitoring
Security monitoring plans for the WordPress websites we maintain. Get an alert when a page is edited, a new admin appears or a plugin is added, with a clear record of who did what and when.
Your maintenance plan already covers updates, backups, uptime and malware scans. Security monitoring adds the piece most sites are missing: eyes on the people who can log in.
A stolen password lets someone log in and change a page like any staff member would. A malware scan will not flag it.
The sooner you hear about a change you did not make, the less time it stays in front of your clients.
Auditors, insurers and compliance officers ask who changed what. A dated history answers that in one export.
Priced per website, per month, on top of your Thomas Digital maintenance plan.
Security plans are add-ons to a Thomas Digital monthly maintenance plan. Alerts go to you and to our team, so a single compromised inbox cannot hide a warning.
| Feature | Watch$50 | Shield$150 | Regulated$250 |
|---|---|---|---|
| Know what changed | |||
| Instant alerts on edits, new admins and plugin installs | |||
| New-location login alerts | |||
| Nightly file and content check | |||
| Site-down check | 5 min | 5 min | 5 min |
| Activity history | Reports | 1 year | 5 years |
| Keep attackers out | |||
| Two-step login for every admin | |||
| Known plugin weaknesses blocked within 24 hours | — | ||
| Hosting-edge firewall | — | ||
| Quarterly login access review | — | ||
| Recover fast | |||
| Safe updates with rollback | — | ||
| Malware removal and clean restore | — | ||
| Response target | — | 4 bus. hrs | 4 bus. hrs |
| Prove it | |||
| Monthly security report | |||
| Monthly dated page snapshots | — | — | |
| 72-hour written notice promise | — | — | |
| Quarterly compliance-officer report | — | — | |
| Annual vendor due-diligence packet | — | — | |
| Written incident report | — | — | |
A page is edited, a user is added, a plugin is installed or someone logs in from somewhere new.
The change is logged with the user, the time and what changed. A nightly check catches anything made outside the editor.
You and our team get an email right away. Edits by your own known staff can roll into a daily summary instead.
If it wasn't you, we lock the account and restore the page. On Shield and Regulated, cleanup is included.
Registered investment advisers, law firms and healthcare practices get asked hard questions about their vendors. The Regulated plan is built to give your compliance officer answers in writing.
For SEC-registered advisers, the change record and monthly snapshots help you keep copies of your website as an advertisement. Our 72-hour notice promise follows the service-provider timing in the SEC's amended Regulation S-P.
Your compliance officer or counsel decides which rules apply to your firm and which pages count as advertisements. Thomas Digital provides the records and notices; we do not give legal or compliance advice.
Yes. Security plans are add-ons to a Thomas Digital monthly maintenance plan. Your maintenance plan keeps the site updated, backed up and scanned; the security plan watches who can change it.
Every alert names who made the change. Edits by the staff you tell us about can go into a daily summary, while unknown users, new admins and new-location logins always alert right away.
No service can promise that. Monitoring makes attacks harder, shortens the time before anyone notices and makes recovery faster. That is why every plan pairs protection with alerts and a clear record.
Many brochure websites do not. Contact forms, client portals and file uploads can. We map what your site holds as part of onboarding, and that map is included in the Regulated plan's due-diligence packet.
You and our team. You choose the email addresses on your side, such as an owner, an office manager or a compliance officer.
Yes. Talk to us and we will move your site to the plan that fits.
Tell us which site and which plan. We will confirm the details and switch monitoring on.