WordPress Update
Included in all WordPress editions
Updates with a safety net
€16.72 / month
excl. 20% VAT
Core, plugins and themes are updated regularly – with a restore point and automatic rollback.
WordPress Carefree
We update core, plugins and themes – with a restore point, automatic function test and rollback. If a vulnerability affecting your site becomes known, we install the update early: usually within 12 hours.
The most dangerous period for a WordPress site is the hours between the publication of a vulnerability and the installation of the update. As soon as a weakness is public, automated scanners search the entire internet for the affected plugin – often within a few hours. Anyone who only updates at the next monthly maintenance date is unprotected during that time.
We evaluate several well-known vulnerability databases, including Wordfence Intelligence.
Every report is checked against the plugins, themes and versions actually installed on your site.
If you are affected, we usually patch within 12 hours – regardless of the regular maintenance interval.
The security update also runs with a restore point and automatic function test.
This applies in all three plans – even the cheapest. A compromised site is far more expensive for you and for us than an early update.
Plans
All three plans include the complete update cycle with restore point and rollback. The differences lie in the monitoring.
Included in all WordPress editions
Updates with a safety net
€16.72 / month
excl. 20% VAT
Core, plugins and themes are updated regularly – with a restore point and automatic rollback.
Recommended
Updates plus continuous monitoring
€32.69 / month
excl. 20% VAT
Additionally uptime monitoring, PHP compatibility check, status report and manual check if anything looks unusual.
For shops and business-critical sites
€58.74 / month
excl. 20% VAT
Additionally staging updates, WooCommerce support, checkout test and priority support.
How to book
WordPress Carefree complements your web hosting or WordPress plan with us. You book it in the customer menu under “WordPress Sorglos”. Not a customer yet? Choose a plan first – it can be added at any time afterwards.
All three plans include the complete update cycle with restore point and rollback. The differences lie in the monitoring and in how business-critical your site is.
Table scrolls sideways →
| Feature | WordPress Update | WordPress Care | WordPress Business |
|---|---|---|---|
| WordPress core | included | included | included |
| Plugin updates | included | included | included |
| Theme updates | included | included | included |
| Backup/snapshot before update | included | included | included |
| Automatic function test | included | included | included |
| Rollback on update failure | included | included | included |
| Matching against vulnerability databases | included | included | included |
| Prioritised security updates | included | included | included |
| Response to critical vulnerabilities < 12 h | included | included | included |
| Uptime monitoring | not included | included | included |
| PHP compatibility check | not included | included | included |
| Regular status report | not included | included | included |
| Manual check if anything looks unusual | not included | included | included |
| Staging updates | not included | not included | included |
| WooCommerce support | not included | not included | included |
| Checkout test | not included | not included | included |
| Priority support | not included | not included | included |
Vulnerability monitoring
Several times a day we record every WordPress and CMS installation on our servers and match it against several vulnerability databases, including Wordfence Intelligence. If your site is affected, we get in touch – free of charge, for every hosting customer.
CMS and version, every plugin and theme with its exact version number, plus the PHP version – several times a day, for all installations.
Every new report from the vulnerability databases is checked against the versions actually installed.
We prioritise by severity and by whether a vulnerability is already being actively exploited. No alert for every trifle.
You receive an e-mail with the installation, affected component and version, severity, available update and the next steps.
Recognising genuine alerts
Automated notifications come from hostmaster [at] twosteps.net or support [at] twosteps.net. We only write from abuse [at] twosteps.email – our own abuse address – in particularly important cases that a colleague has checked personally. Genuine messages name your installation specifically, have no attachments and never ask for passwords.
Start from scratch or simply bring your existing website with you.
Still unsure? Book a consultation ↗
· Arrange a call-back
· Contact form
+49 711 489-657-40
· available Mon–Fri 8 am–6 pm