We take security extremely seriously at Pronto and have a number of measures deployed and planned. Some security measures are active by default and some can be activated upon request. Some of these measures include: Installing SSL certificates – the first step for improving security on a website Activating 2FA – any WordPress user account can be configured with 2FA upon request Enabling HTTP security headers – available on all websites upon request Akismet & reCAPTCHA spam protection – to protect your site against unwanted bot and spam entries Custom WordPress login URL – reduces brute force attacks by hiding the login URL. Soon to be available on all websites upon request 30-day update cycles – keeping your website up-to-date is vital. We are starting to roll out 30-day updates across all our sites And many more! – we have many more security features deployed such as server side protections, and on-site security fixes