Fix what’s broken. Harden what isn’t.
Slow sites lose revenue. Compromised sites lose reputation. We improve WordPress performance and security so your site loads fast, stays protected, and neither problem comes back.
WordPress
maintained
Performance and security sound like two services. They’re really the same service, done in two directions. Both come down to knowing what’s in your WordPress install, and removing everything that shouldn’t be.
Performance is subtraction. Security is discipline.
Eight interventions, four per side. Every engagement is scoped from this list - you pick the shape of the problem, we pick the right tools for it.
Make it fast, and keep it fast.
A speed project starts with a measurable baseline and ends with a Core Web Vitals pass visible in your own Search Console.
Core Web Vitals tune
LCP, INP, CLS driven into the green. Measurable, reproducible, shown in Search Console within 28 days.
Image & asset optimization
AVIF/WebP conversion, responsive srcset, lazy-loading done right. No more 3MB hero JPEGs.
Database & query cleanup
Revision trim, transient purge, index audit. Your database stops carrying its last three years of dead weight.
Caching & CDN configuration
Server-level cache properly scoped, CDN rules written not assumed, Redis object cache where it earns its keep.
Close the door. Install the lock.
Start by assuming compromise. End with a clean baseline and a clear plan to keep it that way.
Malware removal
Deep cleanup of infected files. Database scanned for injected code. Clear report of what was found and fixed.
Hardening pass
Tight permissions. Secure headers. XML-RPC off. Rate limits on. 2FA enforced. Small fixes that close big gaps.
WAF & edge rules
WAF tuned to real attack patterns. Generic noise removed. Site-specific rules that block what actually matters.
Monitoring & recovery
Integrity alerts in place. Backups off-site and tested. A written recovery plan so the next incident is controlled.
The checklist you wish your last developer ran.
Every hardening engagement works through this list. A site that passes all eighteen is genuinely harder to compromise than 95% of WordPress installs in the wild.
Core hardening
- File permissions audited (644 / 755)
- wp-config.php moved above webroot
- Disable file editing in admin
- Unique database table prefix
- Remove unused themes and plugins
- PHP and MySQL on supported versions
Authentication
- Enforce 2FA for every admin
- Rate-limit + lockout on login
- Rename login URL
- Disable XML-RPC
- Strong-password policy for editors
- Audit-log all admin actions
Edge & monitoring
- Cloudflare WAF with site-specific rules
- Security headers (CSP, HSTS, X-Frame)
- File-integrity monitoring
- Daily malware scans
- Off-site backups, encrypted
- Written incident-response runbook
You’ve just noticed you’ve been hacked.
Breathe. This is a fixable problem, and you’re not the first person to find yourself here today. Here’s what we do, in order, for every emergency call.
-
T + 0
Contain
Site put behind maintenance mode so no more visitors hit malicious code. Admin access rotated. Hosting snapshots taken for forensic review before anything is touched.
-
T + 2h
Diagnose
File-system and database scan to find every piece of injected code, back-door user, or modified core file. A written log goes to you as we find each one.
-
T + 6h
Clean
Malicious code removed, core files restored from canonical sources, unknown users purged. Site restored to public with monitoring heightened for 14 days.
-
T + 48h
Harden & report
The full 18-point hardening runs on the cleaned site. You get a written incident report - what happened, how it got in, and exactly what’s changed so it doesn’t happen again.
Audit first. Always.
We don’t quote speed work or hardening work sight-unseen. The $299 audit is both the starting point and, often, all a site actually needs.
Audit
$299 flat. 30-point scored report in 5 business days. Everything we do next is informed by what the audit surfaces.
Scope
A clear, fixed-fee proposal. Here’s what we found, here’s what we’d fix, here’s what we’d leave. No upsell, no scare-tactics.
Execute
Performance tuning or security hardening, applied to staging, tested, then promoted. Daily Loom updates - you see it happen, not just the invoice.
Verify
Core Web Vitals re-measured, security re-scanned, numbers shown against the baseline. A final report documents exactly what changed and why.
Have a Look at What Our Clients Have to Say About Us
Nik’s team did a redesign of my website and really opened my eyes as far as what was possible. They took the content I had, which was presented in a very old / dated format, and reworked it to make it more accessible. The result is a website that is more aligned with customer expectations and is easier for them…
Working with Ninegravity to design and build my website was an exceptional experience. As a demanding client with a challenging concept, I was blown away by their accommodating and patient approach. They consistently went above and beyond to ensure every detail was perfect and brought my vision to life with creativity.
Nik and his team were a pleasure to work with on the Finding Next.guru website build. They’re creative, responsive, organized, and know their stuff. Highly recommended.
Nik’s team has been responsive to our WordPress development needs during the past couple of years. NineGravity was the first offshore team that we’ve worked with and apart from the anticipated challenges of time difference, projects have been managed smoothly.
Nik and his company have done an exemplary job in rebuilding our website and with ongoing maintenance of a site that needed management and work. He and his company took the time to learn all of the nuances of our needs and deployed their team that collaborates with us on a weekly basis. I would highly recommend Nik and his team for any of your web needs without a doubt!.
Highly professional and consistently exceeding expectations. I am extremely pleased to be collaborating with Nik and the Ninegravity team for web development solutions.
Efficient and reliable proffesional.nVery kind and attentive in dealing with the client.nHighly recommended.
Working with Nik has always been a pleasure. He is very proactive, efficient and always attainable. Nik has always ensured things have run smoothly even during urgent case as well. I believe Nik is a great Business sales manager, and will continue to progress within his career.
True mastery of iconic Information & Technology Industry. he always made himself very approachable. he was always very empathetic and fair while maintaining the statute of client upper management.I had worked with Nik and his team and they are truly experts in the software development & POS.
Nik is a very capable technical project manager who understands all areas of digital technology and how to ensure projects keep moving forward. He introduced me to Trello which has been a game changer in my organization
Answered before you ask.
Know what’s actually wrong before you try to fix it.
Five business days, a scored PDF report, and a straight answer. If we can’t help, we’ll tell you who can