Website security and maintenance

Website security and maintenance means keeping the software your site runs on (PHP, Node.js, Java, WordPress, plugins, the server) up to date, closing new flaws quickly when they are disclosed, taking regular backups and watching the site continuously. At EngerekTech we keep your site safe and running, from emergency patching to rebuilding outdated sites and monthly protection.

What do we build?

Emergency patching

Updating the vulnerable software, with a backup first and a check afterwards that the site still works.

Version upgrades

Moving from unsupported versions such as PHP 7.x / 8.1 or Node 20 to a current one, testing plugin and theme compatibility.

Site rebuilds

Rebuilding sites nobody has touched in years, and that can no longer be updated, on a modern, fast and maintainable setup.

Monthly protection

Update tracking, regular backups, certificate and uptime monitoring, a short monthly report and priority on new flaws.

Why now?

On 21 October 2026 critical flaws were disclosed in PHP, Node.js, Java and self-hosted GitLab. The PHP flaw known as PHP2Shell lets attackers run code on the server without logging in, and it was being exploited before it was announced.

Many company websites run on PHP and WordPress, and many have not been updated since the day they were built. Sites like these are hit by automated scans in the days after a flaw is disclosed.

How we work

We start with our free check page to see what your site looks like from outside. Then, with your written permission, we look at the server and admin panel (versions, plugins and settings) and send you, in writing, what needs doing and a fixed price.

Once you approve, we take a full backup, try the updates on a copy where possible and update the live site with the shortest possible downtime. When we are done you get a short report of what changed and what comes next.

What about shared hosting?

On shared hosting the provider usually updates PHP, but in many panels a site can still be pinned to an old PHP version. The WordPress core, themes and plugins are always the site owner’s responsibility.

On a VPS or your own server, operating system, PHP, Node.js, Java and database updates are yours too. We make clear who owns which part in the first review.

How we work

  1. 1

    Discovery: First, we listen

    We talk about your business, your users and the problem you want to solve. With the right questions, we define the product you really need, together.

  2. 2

    Design: We give the idea a shape

    We design the screens, the user flow and the technical structure. We settle the scope, the timeline and the quote, so we see the same picture before development starts.

  3. 3

    Development: We build it together

    We move in small, measurable steps. Every two weeks we share a working version and make your feedback part of the product.

  4. 4

    Launch: We launch, and we stay

    We finish the final checks and bring your product to its users. After launch, we keep supporting you with monitoring, maintenance and new needs.

Technologies we use

PHPWordPressNode.jsJavanginxApacheDockerLet's EncryptCloudflare

Frequently asked questions

How do I know whether my site is affected by PHP2Shell?

Our free check page compares the PHP version your site shows to the fixed releases (8.2.35, 8.3.36, 8.4.27, 8.5.12). If the version is hidden, a definite answer needs a look at the server or hosting panel, which we do with your permission.

Can an update break my site?

It can, which is why we take a full backup first and try the update on a copy where possible. If something goes wrong, we restore the backup within minutes.

Can you check our site without access?

We run the free check, which only reads public information, without access. Server and panel reviews and any kind of testing only happen with your written permission.

How much does it cost?

It depends on how the site is built and how outdated it is. After the first review we fix the work and the price in writing, with no surprise extras.

We did not build the site with you. Can you still help?

Yes. We take over and update sites built by other agencies or freelancers, and look after them from then on.

Let's secure your site today

Let's hear what you need and map out the right path together.

Write to us