EN
Switch to twosteps Switch

Security Center

Security doesn’t stop at SSL.

Digital threats change constantly. That is why, for us, security is part of everyday operations – not an item on a list of technical extras.

Request a security check Subscribe to security updates

Vulnerability monitoring

You hear about a vulnerability in your website from us – not from an attacker.

Several times a day we record every WordPress and CMS installation on our servers and match it against several vulnerability databases, including Wordfence Intelligence. If your site is affected, we get in touch – free of charge, for every hosting customer.

  1. Record

    CMS and version, every plugin and theme with its exact version number, plus the PHP version – several times a day, for all installations.

  2. Match

    Every new report from the vulnerability databases is checked against the versions actually installed.

  3. Assess

    We prioritise by severity and by whether a vulnerability is already being actively exploited. No alert for every trifle.

  4. Notify

    You receive an e-mail with the installation, affected component and version, severity, available update and the next steps.

  • Included for all web hosting and WordPress customers – no sign-up, no extra charge
  • Only technical metadata is analysed – no content, no databases, no visitor data
  • Matching runs exclusively on our own systems
  • Without your instruction we change nothing – unless a compromised installation endangers others. Then we act immediately and inform you straight away.
  • With WordPress Carefree we install security updates ourselves – usually within 12 hours

Recognising genuine alerts

Automated notifications come from hostmaster [at] twosteps.net or support [at] twosteps.net. We only write from abuse [at] twosteps.email – our own abuse address – in particularly important cases that a colleague has checked personally. Genuine messages name your installation specifically, have no attachments and never ask for passwords.

Let us install the updates Full details on our blog ↗

Current notices

Security notices, clearly explained

There are currently no new notices.

Protection

How we protect our customers

Kept up to date

We keep operating system, web server, database and PHP up to date and apply security updates during operation.

Continuously checked

Your websites are scanned for malicious code around the clock. If we find something, we get in touch with a clear recommendation.

Protected

From Profi upwards, a web application firewall filters typical attacks on WordPress, TYPO3 and Shopware before they reach your application.

Backed up

Daily backup in every edition, several times a day from Basic upwards. Restore on request.

Next step

What you can do now

Important security notices by e-mail

Relevant notices when it matters. No daily marketing barrage – usually one or two messages a month.

Ready to put your website in good hands?

Start from scratch or simply bring your existing website with you.

Find the right hosting Switch to twosteps

Still unsure? Book a consultation ↗ · Arrange a call-back · Contact form
+49 711 489-657-40 · available Mon–Fri 8 am–6 pm