Security without becoming a security expert.

To do maintenance, SiteSteward looks at technical information about your website, such as:

• Which versions of WordPress, plugins and themes you're running
• Whether updates are available
• Whether the site is online and healthy

It does not read, copy or store your customer records, orders, email addresses or payment details. That information never leaves your website.

Before making any change, SiteSteward asks your backup tool (such as UpdraftPlus) to create a fresh backup.

• The backup is stored wherever you've chosen, your own hosting or your own cloud storage
• SiteSteward never downloads, keeps or moves your backup files
• You decide where they live and who can access them

Because a backup contains your full database, we recommend pointing it at a secure, private storage location, that part stays in your hands.

• You connect using a small plugin and a one-time code, you never send us your WordPress password
• The connection is encrypted, and every request is digitally signed and verified
• All traffic runs over a secure (HTTPS) connection, it's enforced, not optional
• You can disconnect and revoke our access at any time, from your own WordPress admin

SiteSteward is deliberately cautious:

• It will not apply an update unless a fresh backup has been verified first
• Every update is tested afterwards; if something breaks, it's automatically rolled back
• If no backup can be made, it simply holds off and alerts you, it never changes an unprotected site