EN
Contact
office@version2.hr+385 99 561 7706For AI

Cybersecurity for websites

We keep your website patched as new vulnerabilities appear.

Every week brings new flaws in the plugins, themes and frameworks websites run on. We keep an exact list of what your website uses, watch for vulnerabilities that match it, and apply the fix. It suits shops and business websites that have been running for years and haven't had a careful look since.

For businesses and organisations.

Order a cybersecurity checkRun the free check firstSite already hacked?

We only work on websites you confirm are yours, and nothing is checked before access is agreed with you.

websites built and maintained
300+
years of building and maintaining websites
10+
for critical patches on Priority protection
Same working day

How protection works

Four steps, repeated for as long as you're with us.

  1. 01

    We take stock

    We list everything your website runs on: the platform, the theme, every plugin and library, each with its exact version. Every later check is matched against that list.

  2. 02

    We watch for new vulnerabilities

    New flaws are published every day. Our systems compare each one with your list as soon as it's published, so a match reaches us without waiting for the next routine update.

  3. 03

    We patch

    When something matches, we test the fix and apply it. If no fix exists yet, we close off the weak part, for example by switching off the affected feature or blocking the requests that exploit it, and we tell you what we changed.

  4. 04

    We report

    Each month you get a short record of what was updated, what we found and anything that's waiting on your decision.

What we protect against

The weak points attackers look for first.

Most attacks on business websites aren't aimed at anyone in particular. Automated tools sweep the internet for known weak points and use whichever they find first.

  1. 01

    Outdated software

    Old versions of the platform, plugins and themes with published flaws. Automated tools search for exactly these versions, which is why we watch them every day.

  2. 02

    Leaks

    Files that should never be public: backups, configuration files, error messages that reveal too much, forgotten test pages and customer exports.

  3. 03

    Login and admin access

    Admin accounts that former staff or agencies still hold, weak passwords and logins without two-step verification.

  4. 04

    Traffic attacks

    Floods of requests that slow a website down or take it offline. Where your hosting allows, we put a firewall and a network such as Cloudflare in front, so bad traffic is filtered before it reaches your server.

Free check

See what your website shows to anyone who looks.

We read what your website reveals publicly: its certificate, its security settings and the software versions it gives away. It doesn't touch anything behind your login.

What a report looks like

V2-SC-EX01

One finding from a check report, from discovery to retest.

Asset
A WordPress shop
Scope
Public site and read-only admin access
Method
Every component matched against NVD and vendor advisories
Rating
CVSS 3.1 base score

Severity scale

  1. Critical9.0–10.0
  2. High7.0–8.9
  3. Medium4.0–6.9
  4. Low0.1–3.9

An example of our report format, built on a real published vulnerability. It isn't a finding at a client. Read the advisory on NVD

V2-01 · Vulnerable component

Status: Open

A cache plugin lets anyone become an administrator

Severity
Critical · 9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reference
CVE-2024-28000, published 21 August 2024
Weakness
CWE-266 Incorrect Privilege Assignment
Category
OWASP A06:2021 Vulnerable and Outdated Components
Component
LiteSpeed Cache 6.3.0.1, fixed in 6.4

The installed version of the LiteSpeed Cache plugin has a published flaw that lets a visitor without an account give themselves administrator rights. A working exploit is publicly listed.

Evidence
$ wp plugin get litespeed-cache --field=version
6.3.0.1installed version
CVE-2024-28000 affected <= 6.3.0.1 fixed 6.4matched advisory
Version2 · V2-SC-EX011 / 3

Prices

What each option costs.

01

Cybersecurity check

A thorough look at one website, written up so you or your developer can act on it.

  • Every component and version listed and matched against published vulnerabilities
  • Admin access, exposed files, HTTPS and backups reviewed
  • A written report with priorities and a fix list
  • Delivered within 2–3 working days once access is ready

€190 one-time

Order the check
02

Protection

The check's work, kept up every day for one website.

Month one starts by arranging access and taking stock of the software your website runs; from then on we watch new vulnerabilities against it. A written report with a fix list is part of the cybersecurity check.

  • Your website's software list kept up to date
  • New vulnerabilities matched against it as they're published
  • Critical patches within 3 working days, everything else in the monthly update
  • Firewall and traffic filtering set up where your hosting allows
  • Uptime and certificate watch
  • A monthly record of what changed

€49 per month

Start protection
03

Priority protection

For shops and websites where a day of trouble costs real money.

  • Everything in Protection
  • Critical patches the same working day
  • Your requests handled first

€89 per month

Start priority protection
04

Web application review

For web applications with customer accounts: login, sessions and what each account is allowed to see. Up to 2 roles and 3 workflows, 5–10 working days, following the OWASP Web Security Testing Guide.

OWASP Web Security Testing Guide

from €1,490

Ask about a review
05

Hacked or under attack

We contain the damage, clean the website, close the way in and keep watching it afterwards.

Quoted after a first look

Ask for help

Prices are final, in euros, for one website. Monthly plans are billed through Stripe, and you can cancel at any time. Hosting, paid plugin licences and other third-party services are separate.

What protection can't do.

No one can promise that a website will never be attacked. What we can do is keep known weak points closed, act quickly when a new one appears and tell you plainly what we found. Faults in your hosting itself sit with your host, and we work with them when security is involved.

Order

Choose a plan and the website it covers.

Payment is handled by Stripe. Within one working day we contact you to arrange access, and nothing is checked before then.

Cybersecurity check · €190 one-time

What would you like?

We use these details to deliver the service you order. Privacy policy

Before you order

Questions we're asked about protection.

What access do you need?

An administrator account on your website and, where the platform needs it, access to your hosting. We set it up with you after the order, in a way you can revoke later, and we never ask for passwords by email.

What if there's no patch yet?

Then we close off the weak part until one exists, for example by switching off the affected feature or filtering the requests that use the flaw. We tell you what we changed and undo it once the real fix is out.

Our website is old. Is that a problem?

No, older websites are often where protection matters most. If something is too old to update safely, the check says so plainly and explains what replacing it would involve.

Can you work alongside our developer or agency?

Yes. The check's report is written so any developer can act on it. On a plan, we agree who patches what, so nobody's work gets overwritten.

Our website has already been hacked. What now?

Tell your hosting provider, keep any backups and logs, and write to us. We contain the damage, clean the website and close the way in, and we quote the work after a first look. We reply within 24 hours, but this isn't a round-the-clock emergency line.

How is this different from a care plan?

Care plans cover general maintenance and support hours for websites we build. Protection is security on its own, for any website, including ones built by someone else. If you're already on a care plan, ask us first so you don't pay twice for the same work.

Can I cancel?

Yes, at any time, on our cancellation page or by replying to any of our emails.

Applications and incidents

Tell us what you run.

We work for businesses and organisations. For a web application review, or help with a website that's already been attacked, describe the system and what's happening. We reply within 24 hours.

Prefer a conversation?Free 10-minute call

Cybersecurity inquiry

What do you need?

Please keep passwords, access tokens and customer records out of this form.

We use these details to respond to your message. Privacy policy

ContactWhatsApp