Running a business is busy enough without having to worry about website security. That is why Web60 includes multiple layers of protection on every website, all at no extra cost. This article explains what we do to keep your site safe.
What is included with every Web60 website
SSL certificates on every site
Every Web60 website gets a free SSL certificate, which is the padlock icon you see in your browser's address bar. This means that all information sent between your website and your visitors is encrypted and protected. Your SSL certificate is set up automatically and renews itself, so you never need to think about it.
Server-level firewall
Your website is protected by a firewall that blocks known threats before they ever reach your site. This includes automated attacks, suspicious traffic, and requests from sources that are known to be harmful. It runs in the background and does not affect how your site works for visitors.
Brute-force login protection
If someone tries to guess your WordPress password by attempting lots of logins in a row, Web60 steps in automatically. After too many failed attempts, the source is temporarily blocked. This stops attackers from breaking in through your login page. See our login protection guide for more detail.
Daily automatic backups
A complete copy of your website is saved automatically every day. If anything ever goes wrong, whether from an attack, an accidental change, or a plugin problem, your site can be restored to a recent version quickly. You can also create manual backups from the Backups tab in your Web60 dashboard. Learn more in our backup guide.
Malware scanning
Web60 scans your website for malware and other suspicious files. If anything is detected, our team is alerted and can take action to clean things up before your visitors are affected.
DDoS protection
A DDoS attack is when a huge number of fake visitors try to overwhelm your website and take it offline. Web60 includes protection that detects and blocks this kind of traffic, keeping your site online for real visitors.
Automatic security updates for WordPress
WordPress regularly releases updates that fix security issues. Web60 applies these updates carefully so your site stays protected against the latest threats without you having to do anything.
Isolated site environments
Your website runs in its own separate environment on the server. This means that if another website on the same server had a problem, it would not affect yours. Each site is kept completely separate.
All data hosted in Ireland
Your website and all its data are hosted in Ireland, which helps with GDPR compliance and means your data is subject to European data protection laws.
What you can do to help
While Web60 handles the heavy lifting, there are a few simple things you can do to help keep your site even safer:
- Keep your plugins updated. Out-of-date plugins are one of the most common ways websites get hacked. Update them regularly from your WordPress dashboard.
- Use strong passwords. Choose passwords that are long and hard to guess. Avoid using the same password on multiple sites.
- Only install plugins from trusted sources. Stick to plugins from the official WordPress plugin directory. Avoid downloading plugins from unknown websites.
- Remove plugins you are not using. Unused plugins can still be a security risk, so it is best to delete any you no longer need.
Web60 handles everything else, so you can focus on running your business.
Need help?
If you have any questions about the security of your website, visit our support page and we will be happy to help.
Frequently asked questions
Do I need to install a security plugin?
No. Web60 includes all the security features your website needs, built right into the platform. You do not need to install a separate security plugin.
Is my site protected against hackers?
Yes. Web60 uses multiple layers of protection including a server-level firewall, brute-force login protection, malware scanning, and DDoS protection to keep your site safe from hackers.
Does Web60 scan for malware?
Yes. Web60 automatically scans your website for malware and other security threats. If anything suspicious is found, our team is alerted so it can be dealt with quickly.
Last updated: 31 March 2026