WordPress Carefree

WordPress maintenance that closes vulnerabilities before they are exploited.

We update core, plugins and themes – with a restore point, automatic function test and rollback. If a vulnerability affecting your site becomes known, we install the update early: usually within 12 hours.

We close vulnerabilities before they are exploited

The most dangerous period for a WordPress site is the hours between the publication of a vulnerability and the installation of the update. As soon as a weakness is public, automated scanners search the entire internet for the affected plugin – often within a few hours. Anyone who only updates at the next monthly maintenance date is unprotected during that time.

  1. Continuous observation

    We evaluate several well-known vulnerability databases, including Wordfence Intelligence.

  2. Automatic matching

    Every report is checked against the plugins, themes and versions actually installed on your site.

  3. Early update

    If you are affected, we usually patch within 12 hours – regardless of the regular maintenance interval.

  4. Check and rollback

    The security update also runs with a restore point and automatic function test.

This applies in all three plans – even the cheapest. A compromised site is far more expensive for you and for us than an early update.

Plans

Three plans – depending on how business-critical your site is

All three plans include the complete update cycle with restore point and rollback. The differences lie in the monitoring.

Country

All prices include 22% VAT (Italy).

WordPress Update

Included in all WordPress editions

Updates with a safety net

€20.40 / month

incl. 22% VAT

Core, plugins and themes are updated regularly – with a restore point and automatic rollback.

Recommended

WordPress Care

Updates plus continuous monitoring

€39.88 / month

incl. 22% VAT

Additionally uptime monitoring, PHP compatibility check, status report and manual check if anything looks unusual.

WordPress Business

For shops and business-critical sites

€71.66 / month

incl. 22% VAT

Additionally staging updates, WooCommerce support, checkout test and priority support.

How to book

WordPress Carefree complements your web hosting or WordPress plan with us. You book it in the customer menu under “WordPress Sorglos”. Not a customer yet? Choose a plan first – it can be added at any time afterwards.

Features compared

All three plans include the complete update cycle with restore point and rollback. The differences lie in the monitoring and in how business-critical your site is.

Table scrolls sideways →

Features compared
Feature WordPress Update WordPress Care WordPress Business
WordPress core included included included
Plugin updates included included included
Theme updates included included included
Backup/snapshot before update included included included
Automatic function test included included included
Rollback on update failure included included included
Matching against vulnerability databases included included included
Prioritised security updates included included included
Response to critical vulnerabilities < 12 h included included included
Uptime monitoring not included included included
PHP compatibility check not included included included
Regular status report not included included included
Manual check if anything looks unusual not included included included
Staging updates not included not included included
WooCommerce support not included not included included
Checkout test not included not included included
Priority support not included not included included

Vulnerability monitoring

You hear about a vulnerability in your website from us – not from an attacker.

Several times a day we record every WordPress and CMS installation on our servers and match it against several vulnerability databases, including Wordfence Intelligence. If your site is affected, we get in touch – free of charge, for every hosting customer.

  1. Record

    CMS and version, every plugin and theme with its exact version number, plus the PHP version – several times a day, for all installations.

  2. Match

    Every new report from the vulnerability databases is checked against the versions actually installed.

  3. Assess

    We prioritise by severity and by whether a vulnerability is already being actively exploited. No alert for every trifle.

  4. Notify

    You receive an e-mail with the installation, affected component and version, severity, available update and the next steps.

  • Included for all web hosting and WordPress customers – no sign-up, no extra charge
  • Only technical metadata is analysed – no content, no databases, no visitor data
  • Matching runs exclusively on our own systems
  • Without your instruction we change nothing – unless a compromised installation endangers others. Then we act immediately and inform you straight away.
  • With WordPress Carefree we install security updates ourselves – usually within 12 hours

Recognising genuine alerts

Automated notifications come from hostmaster [at] twosteps.net or support [at] twosteps.net. We only write from abuse [at] twosteps.email – our own abuse address – in particularly important cases that a colleague has checked personally. Genuine messages name your installation specifically, have no attachments and never ask for passwords.

Ready to put your website in good hands?

Start from scratch or simply bring your existing website with you.

Still unsure? Book a consultation ↗ · Arrange a call-back · Contact form
+49 711 489-657-40 · available Mon–Fri 8 am–6 pm