Our Commitment to Cybersecurity
You trust us with your contact details, your systems and sometimes your clients’ information. We protect our own infrastructure with automated, scheduled security checks organized around the CIS Critical Security Controls v8.1, an industry-standard framework published by the Center for Internet Security.
Security Status
- Last automated security check
- October 11, 2026
- Last automatic update check
- October 15, 2026
Security checks run every week and system updates are checked every day. We publish when checks run, not their detailed results.
What We Check and How Often
Each area below lists the CIS Control it supports and how often it is checked. Checks are automated and every run is logged.
Asset and Software Inventory
CIS Controls 1 and 2
Every running service and software component on our server is identified and recorded at each check, so nothing runs that we do not know about.
Weekly
Automatic Security Updates
CIS Control 7
Operating system security updates install automatically every day. When an update needs a restart, the server restarts during an overnight maintenance window.
Daily
Application Updates With Backup and Rollback
CIS Controls 7 and 11
Our website and automation platforms are updated every week. A database backup is taken first, and if an updated service fails its health check it is rolled back automatically.
Weekly
Vulnerability Scanning
CIS Control 7
Every application image running on our server is scanned for known vulnerabilities. Findings are reviewed and prioritized by severity.
Weekly
Secure Configuration Audit
CIS Control 4
An automated hardening audit reviews the server’s configuration against security best practices and flags anything that has drifted.
Weekly
Firewall and Open Port Monitoring
CIS Controls 4, 12 and 13
The server blocks all inbound traffic except secure web traffic. Each check compares firewall rules and open ports against an approved baseline and flags any change.
Weekly
Restricted Administrative Access
CIS Controls 5 and 6
Server administration is only possible through our hosting provider’s authenticated management console. Remote password logins are disabled and administrative access is not exposed to the internet.
Checked Weekly
Encryption in Transit
CIS Control 3
Every page is served over HTTPS. Plain HTTP is redirected, browsers are told to use HTTPS only (HSTS), and certificate validity is checked.
Weekly
Malware Defense
CIS Control 10
Server-level malware scanning runs at all times, and each security check confirms it is active.
Always On
Backups and Recovery
CIS Control 11
Our hosting provider takes full server backups every week, and our website database is backed up before every update.
Weekly
Logging and Records
CIS Control 8
Every update and every security check is logged. Security check reports are kept for six months.
Every Run
How We Handle Your Information
Information you send through our contact form travels over HTTPS and is stored on our own server, behind every protection described on this page. Our Privacy Policy explains how we use it.
What This Page Is, and What It Is Not
This page describes our own practices, verified by automated tools we run on a fixed schedule. It is a self-assessment organized around the CIS Controls, not a third-party audit or certification. We publish when checks run, not their detailed results, so we never hand attackers a map.
Want the Same Protection for Your Business?
We set up the same kind of scheduled patching, scanning and monitoring for clients. See Security and Compliance or IT Support.