Security Questions to Ask Your Web Hosting Company
Websites and blogs face certain problems that may hinder their normal functioning. The problems include virus, malware, filesystem permission issues on shared servers, etc. Some of these issues could be from the web hosting company, and such may put the website at risk.
It is always a good idea to be equipped with the knowledge that will help you determine if your web hosting company is putting your website and data at risk and if the risk can be avoided or mitigated. In the case that you discover you are at risk, you should make a timely decision to move to another hosting company.
The Choice of a secure web hosting company depends on certain factors. However, if you already choose a hosting company, there are certain questions you should ask them to be sure your website is secure:
- Are individual hosting accounts independent of each other or are they capable to read files in other accounts on the same server?
Some hosting providers do not separate accounts from each other, and there is a possibility of one account accessing the data on the other. This is a major security issue because if a fraudulent user gets an account with the same provider, they can access and misuse data of other users. A good hosting company should keep all accounts separate such that other users on the server cannot access other accounts. This is one of the primary clarifications that you need to take from your hosting provider to maintain security.
- Is the site backed up, how is it being backed up and the span of retention of backup files?
Backups are the quickest mode to restore a hacked website. A good backup of the website will help you stay unaffected by the hacking attack as it saves time, money and effort. As part of your interrogation, it is important you ask the web hosting provider if the website is backed up, how long are the logs being retained and where it is being stored. Some companies may not be doing any backups at all; you must stay wary of such providers.
- If the current plan allows HTTPS?
It is very important to log in to a website using a secure connection. If your website doesn’t allow that already, you must fix that immediately because, in the absence of secure connection, attackers may keep track of website traffic, username, password and eventually gain full control of the website. Https also helps rank you higher on search engines and protects your data on forms and payment windows. It is highly recommended to switch to https if you have not done so already
- The duration and availability of server logs?
Another question you should ask your hosting provider is if your server logs are available and for what duration you can access them. Server logs assist in the effective and conclusive investigation in cases of website attack. A good hosting provider will offer instant access to all logs within the past 24 hours on the server while the best hosting provider will offer archiving capability up to 30 days.
- Version and history of infrastructure elements such as C-Panel, Operating System, Caching Technology, PHP, phpMyAdmin, and MySQL:
You need to check the versions of infrastructure elements to rule out any older versions with security vulnerabilities as this can expose all the customers of the hosting provider to hackers and hence data theft. Additionally, if the company you are dealing with uses an older version but with backported security fixes, you can be assured of your security. Backported fixes are newer security fixes made on older software versions, so the security parameters are equivalent to the current requirements. You must ensure the themes, plugins, and core are the latest and also follow up to ensure that the remaining site software used by the web hosting provider is up to date.
Hosting related security issues may be very fatal to your website, and the role of your hosting provider is quite important. Ensure you ask the right questions that will enable you to make the right decision to have secure web hosting. Feel free to call us today on 07013234480, 07013234484. You may also visit our website www.oasismgt.com.ng or www.oasismgt.net for more information.
Please feel free to share this with your friends. Also, you may like our social media pages and subscribe to enable you get notifications straight to your mailbox. Cheers!