Cyber security servicesFind the weak spots before someone else does
Practical cyber security for small businesses: vulnerability scanning, website hardening, and help preparing for PCI DSS and Cyber Essentials. Explained in plain English, without scare tactics.
- Tenable Nessus scanning
- PCI DSS readiness
- Clear, prioritised fixes
Cyber security services
Sized for small and growing businesses, not enterprise budgets.
Vulnerability scanning
Scans of your websites, servers and public IP addresses using industry-standard tools such as Tenable Nessus, followed by a report that ranks every finding by risk.
PCI DSS readiness
Taking card payments? We help you understand which PCI DSS requirements apply, prepare your Self-Assessment Questionnaire (SAQ) and fix the gaps.
Cyber Essentials preparation
Get ready for the UK government-backed Cyber Essentials scheme: firewalls, secure configuration, access control, malware protection and patching.
Website & server hardening
Security headers, TLS configuration, admin protection, two-factor authentication, file permissions and safe backups for your website and hosting.
Incident help
Hacked website, malware warning or suspicious emails? We help you contain it, clean up, restore from backups and close the hole.
Security advice
Plain-English guidance on passwords, phishing, email security (SPF, DKIM, DMARC), staff awareness and what to prioritise first.
Know exactly what's exposed
Most small business breaches start with something simple: an outdated plugin, an open port or a weak admin password. A vulnerability scan finds these issues before attackers do.
- External scans of websites, servers and IP ranges
- Checks for known vulnerabilities (CVEs), outdated software and misconfigurations
- SSL/TLS, security header and email authentication checks
- A prioritised report: what to fix first, and how
- Optional re-scan to confirm everything is fixed
One-off or ongoing
Run a single scan before a launch or audit, or schedule regular scans so new vulnerabilities are caught as soon as they're published.
Take card payments with confidence
If your business stores, processes or transmits card data, the Payment Card Industry Data Security Standard (PCI DSS) applies to you. Your bank or payment provider may ask you to complete a Self-Assessment Questionnaire every year.
- Work out your scope and which SAQ applies to you
- Reduce scope with hosted payment pages and tokenisation
- Gap analysis against PCI DSS requirements
- Help with the evidence and fixes your questionnaire needs
- Vulnerability scans to support your compliance
We help you prepare and fix gaps. Formal assessments are carried out by a Qualified Security Assessor (QSA) or Approved Scanning Vendor (ASV) where your provider requires one.
Get ready for Cyber Essentials
Cyber Essentials is the UK government-backed scheme that shows customers you take security seriously, and many public sector and larger clients ask for it. We help you meet its five technical controls before you apply.
Firewalls
Boundary firewalls and internet gateways configured to block unwanted traffic.
Secure configuration
Default passwords changed and unnecessary software and accounts removed.
User access control
The right people with the right access, admin accounts locked down, and 2FA turned on.
Malware protection
Anti-malware in place and kept up to date across your devices.
Security update management
Operating systems and software patched promptly, with unsupported software replaced.
Application support
We help you prepare for the self-assessment, then you apply through an accredited certification body.
Security starts with your hosting
Every HostWithUs247 hosting plan includes free wildcard SSL, automatic malware scanning, 1 Tbps+ DDoS protection, PCI-compliant servers and an FTP security lock as standard.
Not sure whether you need SSL? Read what an SSL certificate is and why it matters.
- Free wildcard SSL certificates
- Automatic malware scanning
- 1 Tbps+ DDoS protection
- PCI-compliant servers
- FTP security lock
- UK data centres
Cyber security questions
What's included in the free security check?
A quick external review of your website: SSL/TLS set-up, security headers, visible software versions, admin login exposure and email authentication (SPF, DKIM, DMARC). You get a short summary of the most important fixes.
What's the difference between a vulnerability scan and a penetration test?
A vulnerability scan uses automated tools such as Tenable Nessus to find known weaknesses across your systems. A penetration test is a manual, in-depth attempt to exploit them. For most small businesses, regular scanning plus fixing the findings is the best place to start.
Do I need PCI DSS if I use Stripe, PayPal or Worldpay?
Usually yes, but your scope can be much smaller. Hosted payment pages mean card data never touches your server, which often means a much simpler questionnaire. We'll help you work out exactly what applies.
Can you certify us for Cyber Essentials or PCI DSS?
Certification is issued by accredited bodies: Cyber Essentials certification bodies, and QSAs/ASVs for PCI DSS. We help you prepare, fix the gaps and get your evidence together so you pass first time.
My website has been hacked. Can you help?
Yes. Contact us straight away. We'll help contain the problem, clean the site, restore from backups where possible and fix the weakness that let the attacker in.
Ready to get your business online?
Tell us what you need. We'll come back with a fixed price. No jargon, no hard sell.