WORDPRESS SECURITY • HAPPY CAMPER
How We Protect Your WordPress Website
Layers of protection.
People who care.
Every Happy Camper WordPress hosting plan includes server-level security, automatic malware cleanup, automated backups with 30-day retention, and personal support. These protections come standard—no separate security subscription or higher-tier hosting plan required.
A strong foundation. A personal approach.
Practical protection, clear answers, and people who know your website.
ADDITIONAL PROTECTION • HIPAA HOSTING
Extra protection against ransomware.
Our HIPAA hosting includes backups in two separate offsite locations. One backup destination is configured with 90-day immutable storage, designed to prevent protected backup data from being altered or deleted during its retention period—even by an administrator. This adds protection against ransomware and accidental deletion.
Explore HIPAA hostingSecurity tools
Detection & response
Careful maintenance
Updates & health checks
Recovery planning
Backups & investigation
Personal support
Clear next steps
DEFENSE IN LAYERS
Security that goes beyond
one WordPress plugin.
Protection works best in layers. We combine hosting security tools with maintenance and a practical response when something looks wrong.
Real-time protection. Around the clock. Included.
Your website’s security stays on duty 24/7. Every Happy Camper WordPress hosting plan includes real-time server-level protection powered by Imunify360, with malware detection, firewall protection, and automatic cleanup upon detection.
Protection responds as threats are detected, without waiting for the next scheduled scan. And when an incident needs additional attention, our team provides hands-on malware cleanup assistance—included with your hosting.
No separate security subscription. No higher-tier plan required.
These core protections operate at the server level, independently of access to your WordPress dashboard.
ACTIVE DEFENSE
Stop malicious code while it runs
Imunify360 Proactive Defense analyzes PHP activity during execution and can stop detected malicious behavior. This adds an active layer of protection alongside malware scanning and cleanup.
DETECTION & CLEANUP
Protection beyond a single infected file
Our security tools include website-file and WordPress-database malware scanning. Automatic cleanup responds to detected infections, with hands-on malware cleanup assistance included when an incident needs additional attention.
MAINTENANCE
Security patching
We maintain the hosting platform and address documented vulnerabilities. Updates are followed by service checks and checks of hosted applications, so a completed update is followed by verification.
INVESTIGATION & RECOVERY
Find the problem. Verify the repair.
We use WordPress core integrity checks, security logs, and backup history to investigate suspicious changes and verify repairs. Core integrity checks compare WordPress files against official checksums to help identify unauthorized modifications.
We tackle the malware while keeping your business online.
Our real-time protection automatically initiates cleanup when malware is detected, with hands-on assistance included when needed. Throughout our history of handling customer malware incidents, we have never needed to suspend a website to resolve an infection.
KEEPING THE FOUNDATION HEALTHY
Thoughtful maintenance.
Useful monitoring.
Keeping your website current helps reduce avoidable security risks. Monitoring helps us spot hosting issues that need attention.
Included with every WordPress hosting plan.
Smart Updates and Smart PHP Updates
Test WordPress updates and PHP version changes before applying them to your live website, helping identify compatibility problems before they affect visitors.
One-click staging
Create a staging copy to test changes, then easily copy approved changes back to your live website.
WordPress Toolkit
Manage WordPress, activate or deactivate plugins, and perform maintenance from your hosting dashboard—even when you can’t access the WordPress dashboard.
Automated updates help keep WordPress core, plugins, and themes current. These capabilities are included; automatic updates must be enabled for your specific site. Where enabled, Smart Updates tests changes on a separate copy before applying them to your live site. We still recommend periodically checking important pages, forms, and checkout flows, especially after updates.
MONITORING
Checks with context
We use server and service monitoring, with public HTTPS checks for configured websites. A warning is a starting point: we look at the relevant evidence to separate hosting issues from website or plugin issues.
YOUR WEBSITE
A clear division of responsibility
We take responsibility for hosting protection, hosting-side investigation, and included malware cleanup assistance. Website development, plugin/theme compatibility, and ongoing application maintenance should be agreed explicitly with us or your developer.
A PRACTICAL PATH BACK
Automated backups.
30 days of history. Included.
Every standard hosting plan includes automated backups with 30-day retention, stored in two locations, including an offsite copy.
You can also configure scheduled backups to your own Dropbox or Google Drive account, giving you an additional copy under your control. This capability is included with every plan.
We use backup history alongside file and log evidence to identify useful restore points and understand what changed. Restoring an older copy can also restore an old problem, so the follow-up matters.
01 • REVIEW
Find a suitable restore point
We use the available backup history to compare a known-good state with the affected website. Standard hosting includes 30-day retention; the useful restore point depends on the incident and the backups available.
02 • RECOVER
Recover with care
A recovery may involve restoring files or database content, removing unwanted changes, and reviewing access. The appropriate approach depends on the incident and the backups available.
03 • VERIFY
Check what comes back
We check the recovered website and investigate the cause. A successful backup job alone does not prove a complete restore; recovery checks need to confirm the result.
Need help setting up your own offsite backup destination? We’ll help you get connected.
REAL PEOPLE • CLEAR ANSWERS
When something needs attention,
you can talk to us.
You do not have to work through a website problem alone. We’ll investigate the hosting side, provide included malware cleanup assistance, explain what we find, and work with your developer when the next step involves plugin, theme, or custom-code development.
Tell us what changed.
A few details help us investigate more quickly:
✓ The affected page or website address
✓ What you expected and what happened
✓ When the issue began
✓ A screenshot or exact error message
✓ Any recent website changes
We’ll help identify the next step and coordinate with your developer when needed.
SEPARATE HOSTING ENVIRONMENT
Handling patient data?
HIPAA hosting adds another layer.
The protections below are specific to our HIPAA hosting environment. They are not included in every standard WordPress hosting plan. Talk with us about the environment, the BAA, and the requirements for your website before moving patient information.
HIPAA ENVIRONMENT
Encryption & access controls
Our specialized environment uses full-disk encryption and hardware-backed administrative SSH access. Root SSH login is disabled, and administrative activity is logged.
HIPAA ENVIRONMENT
Daily backups, separately stored
Backups stored in two separate offsite locations. Daily backups and separate checks of each copy help us confirm that backups are current. One destination also has immutable storage configured, as explained above.
HIPAA ENVIRONMENT
Account isolation
The specialized environment uses CloudLinux CageFS and resource controls. Account isolation helps separate hosting users; it does not replace secure WordPress code or careful access management.
HIPAA ENVIRONMENT
A dedicated security review process
Our dedicated review process covers security events, encryption, backup freshness, service health, and administrative accounts. Some checks require manual review alongside the weekly automated report.
A hosting environment is one part of your overall HIPAA approach. Your website, forms, integrations, access practices, and agreements also need to fit how you handle patient information. We will discuss the scope with you rather than assume a hosting plan alone settles it.
Explore HIPAA WordPress HostingFREQUENTLY ASKED QUESTIONS
A few clear answers.
Can a hosting plan stop every WordPress attack?
No. Hosting protection reduces risk, but compromised passwords, vulnerable plugins, and unsafe application changes can still cause problems. Strong access practices and appropriate website maintenance remain essential.
Do you update every plugin and theme for me?
Automated updates help keep WordPress core, plugins, and themes current. Where enabled, Smart Updates tests changes on a separate copy before applying them to your live site. Periodically check important pages, forms, and checkout flows, especially after updates. Confirm the update and maintenance coverage for your site with us.
What backup protection is included?
Every standard hosting plan includes automated backups with 30-day retention, stored in two locations, including an offsite copy. You can also configure scheduled backups to your own Dropbox or Google Drive account. Our separate HIPAA environment includes daily backups to two offsite locations, with 90-day immutable storage configured at one destination.
What happens if my website is compromised?
Our security system automatically cleans detected malware. If you notice suspicious activity or need additional help, contact us. We investigate, provide included malware cleanup assistance, and use available backups when recovery is needed. There is no separate malware-removal subscription to purchase. If the underlying issue requires plugin, theme, or custom-code development, we’ll explain what needs attention and coordinate with your developer.
Are standard WordPress plans HIPAA hosting?
No. HIPAA hosting uses a separate environment with additional documented controls. Discuss patient-data workflows, agreements, and the right hosting setup with us before collecting or moving sensitive information.
LET’S TALK ABOUT YOUR WEBSITE
Know your protection.
Plan your next step.
Whether you need help with an existing site, clarity on your backup setup, or a separate HIPAA hosting environment, we are here to help you choose the right approach.
