Website Health & Risk AssessmentStep 1 of 7 - Backups0%Name* First Last Email* Website Address*BackupsDo you take backups?* I have no backups I take backups manually My backups run automaticallyHow often are you backing up your database?How often are you backing up your files?Where are those backups stored? Locally on the same server as the website Off-site Cloud Storage Downloaded to local computer I don't really knowWhat off-site storage service(s) are you using?* Amazon S3 Box DropBox Google Drive Private FTP Server Rackspace Cloud Other I don't knowDo you know how to restore from a backup? Yes No ...Maybe?How long do you think it take you to restore a backup?*When was the last time you ran a "backup firedrill"?*This weekThis monthIn the last quarterIn the last 6 monthsIn the last yearI've done it, but not recentlyNever Software UpdatesIs everything up to date right now?*WordPress Core and all Plugins? Yes No I don't knowWho manages your WordPress Core and Plugin updates?*Are updates run proactively or re-actively?*On a schedule vs. when updates are released Proactively Re-activelyHow often are updates run?*Do you treat security releases differently than feature releases?* Yes NoWhat is your response time for running newly-released security updates?*X number of Y (minutes, hours, days, weeks, months, years)Do you test site functionality after updates?* Yes NoDescribe your process:* SecurityDoes your site have an SSL Certificate?*does it load with https:// and have a pretty green lock? Yes No I don't knowAre you doing any pre-hosting security filtering?*like hosting your DNS with Cloudflare, for example Yes No I don't knowDo you do any malware scanning/prevention?* Yes No I don't knowWhat types of malware scanning/prevention? Scheduled internal malware scan(s) Scheduled external malware scan(s) Active threat detection Web Application Firewall (WAF)Are you using any security Plugins?* Yes No I don't knowWhich ones? All In One WP Security & Firewall BulletProof Security iThemes Security SecuPress Sucuri Security WordFence VaultPress OtherAre you enforcing strong passwords for all accounts?* Yes No I don't knowDoes the default "admin" account still exist on your site?* Yes No I don't know HostingDo you host in a Manged WordPress Hosting Environment?* Yes No I don't knowWho is your host?*In which WordPress Managed Environment is your site hosted?FlywheelKinstaLiquid WebPagelyPressableSiteGroundWordPress VIPWP EngineOtherWho is your Managed WordPress host?* MonitoringDoes your site have uptime monitoring in place?* Yes No I don't knowDoes your site have speed monitoring in place?* Yes No I don't know SupportWho built your site?* Me! it was all DIY & Google My friend helped me put it together A professional I paid less than $1,000 A professional I paid more than $1,000Are you still working with them?* Yes No I'm not sure...If something went wrong with your site, do you have a “Ghostbusters Plan” in place (Who you gonna call??)* The Ghostbusters ... duh. Google My friend who helped me put the site together My Developer (professional) My Host My Mom I don't know who I'd call FinaleWhat prompted you to fill this out today?*Do you have a specific problem you're hoping to solve?* Yes NoDescribe your problem and what success would look like:*Anything else you'd like to share?NameThis field is for validation purposes and should be left unchanged.