Is Your Small Business Website Secure? 7 Things an IT Pro Checks First
I spent more than 20 years in enterprise IT and security, including running internal IT and security operations for a 500+ user, multi-site company. When I look at a small business's website, I don't just see the design. I see the same weak spots I used to lock down on corporate systems. Here are the first seven things I check.1. Is HTTPS (SSL) working on every page?
If browsers show “Not secure,” customers leave, and search engines rank you lower. Every page, including forms, should load over HTTPS.2. Who controls your domain?
A surprising number of businesses don't know where their domain is registered or whose name is on it. Often it's a former employee or a previous web designer. If you lose that account, you can lose your website and email.3. Is your business email properly set up?
Using a free Gmail or Yahoo address looks less professional and is easier to impersonate. A domain email with proper authentication records (SPF, DKIM, DMARC) helps keep your messages out of spam and makes it harder for scammers to spoof you.4. Are there backups, and has anyone tested them?
Backups only matter if you can restore from them. Know where your site is backed up and how quickly it can be brought back.5. Are logins protected?
Shared passwords, old accounts for people who no longer work with you, and no two-factor authentication are the most common ways small-business accounts get taken over.6. Is the site software kept up to date?
Outdated plugins and themes are a leading cause of hacked small-business websites. Updates should happen regularly, not just when something breaks.7. Do your contact forms actually work?
I regularly find forms that send to an old inbox, land in spam, or don't send at all. That's lost business you never hear about.Let an IT pro take a look
Every Garrett Walker Designs website includes SSL, backups, secure hosting, and ongoing updates, and I can help set up your domain and business email the right way. Request a free Sameness Audit and I'll include a quick security check, or call (224) 688-2364.
