Security Policy

Amity Web Solutions takes security seriously which is why we have the following policy in place:

Servers

  • We frequently update all our web hosting servers to use the latest software, which would include security and bug patch releases
  • Serious security threats would be patched on the servers as soon as possible
  • We have an industry leading firewall to protect the servers, in particular:
    • DDoS Attacks
    • Block vulnerable scripts in CMS
    • Monitor suspicious activity (several password failures for example) and block IP addresses
    • Closed all ports except from approved IP addresses
  • No public facing control panels
  • Secure password policy, at least 8 characters of random uppercase and lowercase letters, numbers and symbols
  • Virus and malicious file scanner continuously scanning the server for malicious files with immediate quarantine
  • Connection to servers from our approved IP addresses is via Secure Shell Access methods only (SSH). We do not use insecure FTP, but secure SFTP.

Websites

  • Secure password policy for logins
  • Systems kept up to date where feasible
  • Reputable content management systems and plugins that have in-built security protection
  • Hard to guess admin URLs
  • SSLs as standard
  • We have strict guidelines, standards and a go live checklist we follow to build websites to a high standard and to ensure security is met

WordPress in Particular Additionally Has:

  • Security and firewall plugins to monitor and protect it from malicious access
    • Includes virus and malicious file scanner continuously scanning the server for malicious files with immediate quarantine
  • Automatic and frequent updates to WordPress core, themes and plugins
  • Only reputable themes and plugins are used