Cybersecurity for small business, Myrtle Beach, SC

Watched around the clock, by the people who built it.

Every site we audit this month had a hole in it: a credit application collecting Social Security numbers with no privacy policy, a domain quietly redirecting to a casino, a form saving customers' passwords as readable text. None of those were hacks. They were sites nobody was watching. This is the watching: monitoring around the clock, hosting with the protections on, domain and email protection, a monthly look at your site from the outside, and penetration testing with your written OK, by the engineers who build to the same standard we run our own platforms on.

Protect my site →Free security check

What we watch, and what we test

Everything that goes wrong when nobody is watching.

Monitoring around the clock

Your site, your domain and your certificate watched every few minutes, all day and all night: is it up, is it serving what it should, did a page change that nobody changed, did a DNS record or a registrar setting move. Alerts page a person, not a mailbox nobody reads.

Penetration testing, with your written OK

We try to break in the way an attacker would, within a scope you sign off on in writing first: which systems, which dates, what is off limits. You get a report of what we got into, how, and the fix for each, in plain English, and a retest once it is closed. Never without written authorization, never on anything you don't own.

Hosting with the protections on

The same global hosting our own platforms run on, with HTTPS enforced, framing by other sites blocked, content types locked and a content security policy on every page. The headers most small-business sites are missing, we ship by default.

A monthly look from the outside

Once a month we check your site the way a stranger would: what files are reachable, what the store's data feed hands out, whether a login name or a price list is public, whether your email can be forged. You get a plain-English note, and anything serious gets fixed, not filed.

Running in Try the free check

Domain protection

Expiry and auto-renew watched, an alert the moment a domain's settings change, registrar locks checked, and your domains confirmed to be in your own account, not a former web designer's. From $29 a month per domain, included in every care plan.

Running in How domains get lost

Email that can't be forged as you

SPF, DKIM and DMARC set and enforced, so a scammer can't send an invoice from your address and your real mail stops landing in spam. Checked every month, because providers change things.

Same-day changes by text

New hours, a new special, a new page. Text it in and it's live the same day. No logins, no tickets, no plugin to update and no update to break the site.

Running in What a care plan includes

Backups you can actually restore

Daily, kept off the server, and tested. If something goes wrong, the question is which hour to go back to, not whether there is anything to go back to.

Built to the standard we're audited against

We run our own company to the SOC 2 Trust Services Criteria and collect the evidence weekly: two-step sign-in, least-privilege access, tamper-evident records, a written incident plan. Your site rides on the same practices.

Running in Our security page

First call when it goes wrong

Protect clients get our incident response at retainer rates and go to the front of the line. Most never need it, because the monthly check catches it first.

Running in Incident response

Free website check

Is your website costing you calls?

Type your address. Results in seconds, in plain English, then a free full audit from Nikita.

What it costs.

Flat monthly prices, in writing, cancel any time. Everything above is in the care plan; domain protection is also sold on its own for businesses whose site we didn't build.

Care plan

$249/mo

per site

Hosting, the monthly check, domain and email protection, backups, same-day changes by text, and the people who built the site on the other end.

Domain protection

$29/mo

per domain

For any domain, whoever built the site. Expiry, settings changes, registrar locks and ownership, watched and reported.

Incident retainer

$199/mo

priority response

Same-day response at retainer rates for a hacked site, a hijacked domain or a taken-over mailbox. Included for care plan clients.

Protect my site →Call 843-331-6339

Proof

Built and running. Go look.

Local business websiteLive

Housecall Auto Mechanics

A mobile mechanic's site, moved off Wix without losing a link and sitting at the top of Google's local results for mobile mechanic in Myrtle Beach.

A clean move off Wix. Nameservers moved, every email record copied exactly, the TLS certificate issued, and every old page address kept or redirected, so nothing Google had indexed broke.

Local SEO that does its job. LocalBusiness structured data, a clean sitemap, his existing Search Console verification carried over, and pages written around what people actually search for.

Built for a phone at the roadside. Call and text buttons that follow you down the page, plain prices, and a contact form that lands in his inbox.

Case study →Visit housecallautomechanics.com ↗

housecallautomechanics.com

Housecall Auto Mechanics website on a desktop

Event company website + rentalsLive

Pierpoint Events

An AVL, DJ, photobooth and rentals company's site, rebuilt from scratch: rentals you can book and pay for online, a page for every venue they've worked, and readable in two seconds on one bar of signal.

Designed and built from scratch. No page builder and no template.

Rentals you can book and pay for. 43 rentals with written descriptions and day rates, checkout by card or Cash App, and South Carolina and county sales tax worked out from the address, all through the payment account the business already had.

A page for every room they've played. 41 venue pages, each linking the venue's own site, six service-area pages and nine planning guides, written around what people search before they book.

Case study →Visit pierpointevents.com ↗

pierpointevents.com

What we keep finding

Not hacks. Sites nobody was watching.

A car dealer taking credit applications, Social Security numbers included, on a page with no privacy policy. A machine shop whose web address had been redirecting customers to a gambling site for six weeks before anyone noticed. A sign company whose only contact form made customers type a password into a box that saved it as plain text. A law firm whose home page described a different law firm in another state.

None of those businesses were targeted. They were built once, by someone who moved on, and then left running. The plugin fell behind, the domain renewed into the wrong account, the form tool changed its defaults. Nobody was looking from the outside, so nobody saw it.

That is the whole job of Protect. We look from the outside every month, we keep the protections on, and when something does change, you hear it from us in plain English before you hear it from a customer.

Questions

Straight answers.

Can you protect a site you didn't build?

Domain protection and the incident retainer, yes, for any site. The full care plan needs the site on our hosting, because the protections are in how it is served, not bolted on afterward. If your site is on WordPress, Wix or Squarespace, the usual path is the free check, then a fix or a rebuild, then Protect.

Is this cybersecurity?

Yes, scaled to a business without an IT department. Monitoring around the clock, a site served with the protections on, a domain that can't expire into a stranger's hands, email that can't be forged, backups that restore, a monthly look from the outside, and penetration testing when you authorize it in writing. The same engineers run our own platforms to the SOC 2 standard, and we tell you plainly when something is outside what we do.

How does penetration testing work?

You sign a short authorization first: what we may test, when, and what is off limits. Then we test it the way an attacker would, without breaking anything or touching real customer data. You get a written report with each finding, how we got there, how bad it is and how to fix it, and a retest after. We never test anything without that signed authorization, and we never test systems you don't own.

What does the monthly check look at?

The same things the free check on this site looks at, run on every page and with a person reading the result: protective headers, exposed files, public login names, store data feeds, email authentication, domain settings, speed, and how Google and the AI assistants see the site. Anything serious is fixed and written up.

What happens if my site gets hacked anyway?

You call, we pick up the same day, and the incident response page describes exactly what happens next: contain, clean, restore, harden, and a written report. Care plan clients get it at retainer rates and go first.

Can I cancel?

Any time, with a month's notice. Your site, your domain and your content are yours; we hand over a copy of everything and the domain stays in your account because it was always in your account.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back

02A planning call, then a written plan with the price and the date

03A preview on your phone while it's being built

04Launch night handled: redirects, email, Google

843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.