1. Home
  2. Services
  3. CH3 Security

Know where you are exposed.

Audits, hardening and monitoring for WordPress sites and web applications, explained without fear and documented change by change.

CH3 Security

Security that is measured, fixed and watched.

Start with an audit that rates every risk. Close the gaps with a hardening package that documents each change. Then watch for attacks with centralized logging and alerts your staff can understand.

Security audits

A clear, prioritized list of what to fix.

  • Plugin and theme vulnerability scan
  • User roles, login and 2FA review
  • SSL/TLS, file permissions and server configuration
  • Risk-rated written report and debrief call

Hardening

Every fix implemented and documented.

  • Core, plugin and theme hardening
  • Brute-force blocking and two-factor authentication
  • Security headers and web application firewall
  • Malware scan and cleanup when needed

SIEM and SOC monitoring

See attacks before they become incidents.

  • Centralized logging across sites and apps
  • Alert rules for common attack patterns
  • AI-assisted log analysis
  • Incident response runbook and staff dashboard

Massachusetts privacy review

Data handling you can explain to customers.

  • Cookie consent and tracking audit
  • Plugin telemetry and third-party data flows
  • Data handling practices review
  • Remediation checklist
CH3 · Security $850Security Audit, the usual starting point Book a discovery call Compare packages

Free 30-minute call · Proposal in 3 business days

Packages

Fixed fees with a signed scope, or hourly at the published rate.

Security AuditVulnerability scan, roles, 2FA, SSL/TLS, server config, risk-rated report, debrief.$8505 business days
Hardening Package Most popularFull audit plus implementation: hardening, 2FA, WAF, headers, log monitoring, change log.$2,4001–2 weeks
SIEM / SOC SetupMulti-site monitoring, central logging, alert rules, AI log analysis, runbook, 60 days tuning.$4,500+2–4 weeks
MDPA Compliance ReviewCookie consent, plugin telemetry, data handling and a remediation checklist.$675Add-on

Current with the field

Security practice changes monthly. Jeremy attends OWASP security events and writes up what matters for small organizations.

Cybersecurity

Attending OWASP BASC Boston 2026: AI, AppSec, and the future of backported security

Notes from the conference on AI-assisted backporting and keeping legacy systems secure.

Questions about security

If yours isn't here, ask on the call.

Will hardening break my site?

Changes are tested on a copy first and every one is documented, so anything unexpected can be traced and reversed.

We already have antivirus and an IT company. Is that enough?

Device and network security is different from web application security. The audit shows exactly where your website and plugins stand.

How often should we audit?

At least yearly, and after any major change. The Partner care plan includes a quarterly full audit.

Tell us what the system needs to do.

A free 30-minute discovery call, then a written proposal within three business days.

Or writeinfo@jeremyanderson.tech