Ongoing site security, monitoring and penetration testing — not a one-off setup. We keep an eye on the sites and systems we host, and can carry out security testing to identify weaknesses before someone else finds them. Server-level hardening (caching, PHP configuration, access control) is handled as part of our own infrastructure management, so security isn’t bolted on separately from hosting.