Website Health & Risk Assessment Step 1 of 7 - Backups 0% Name* First Last Email* Website Address*BackupsDo you take backups?*I have no backupsI take backups manuallyMy backups run automaticallyHow often are you backing up your database?How often are you backing up your files?Where are those backups stored? Locally on the same server as the website Off-site Cloud Storage Downloaded to local computer I don't really know What off-site storage service(s) are you using?* Amazon S3 Box DropBox Google Drive Private FTP Server Rackspace Cloud Other I don't know Do you know how to restore from a backup?YesNo...Maybe?How long do you think it take you to restore a backup?*When was the last time you ran a "backup firedrill"?*This weekThis monthIn the last quarterIn the last 6 monthsIn the last yearI've done it, but not recentlyNever Software UpdatesIs everything up to date right now?*WordPress Core and all Plugins?YesNoI don't knowWho manages your WordPress Core and Plugin updates?*Are updates run proactively or re-actively?*On a schedule vs. when updates are releasedProactivelyRe-activelyHow often are updates run?*Do you treat security releases differently than feature releases?*YesNoWhat is your response time for running newly-released security updates?*X number of Y (minutes, hours, days, weeks, months, years)Do you test site functionality after updates?*YesNoDescribe your process:* SecurityDoes your site have an SSL Certificate?*does it load with https:// and have a pretty green lock?YesNoI don't knowAre you doing any pre-hosting security filtering?*like hosting your DNS with Cloudflare, for exampleYesNoI don't knowDo you do any malware scanning/prevention?*YesNoI don't knowWhat types of malware scanning/prevention? Scheduled internal malware scan(s) Scheduled external malware scan(s) Active threat detection Web Application Firewall (WAF) Are you using any security Plugins?*YesNoI don't knowWhich ones?All In One WP Security & FirewallBulletProof SecurityiThemes SecuritySecuPressSucuri SecurityWordFenceVaultPressOtherAre you enforcing strong passwords for all accounts?*YesNoI don't knowDoes the default "admin" account still exist on your site?*YesNoI don't know HostingDo you host in a Manged WordPress Hosting Environment?*YesNoI don't knowWho is your host?*In which WordPress Managed Environment is your site hosted?FlywheelKinstaLiquid WebPagelyPressableSiteGroundWordPress VIPWP EngineOtherWho is your Managed WordPress host?* MonitoringDoes your site have uptime monitoring in place?*YesNoI don't knowDoes your site have speed monitoring in place?*YesNoI don't know SupportWho built your site?*Me! it was all DIY & GoogleMy friend helped me put it togetherA professional I paid less than $1,000A professional I paid more than $1,000Are you still working with them?*YesNoI'm not sure...If something went wrong with your site, do you have a “Ghostbusters Plan” in place (Who you gonna call??)*The Ghostbusters ... duh.GoogleMy friend who helped me put the site togetherMy Developer (professional)My HostMy MomI don't know who I'd call FinaleWhat prompted you to fill this out today?*Do you have a specific problem you're hoping to solve?*YesNoDescribe your problem and what success would look like:*Anything else you'd like to share?PhoneThis field is for validation purposes and should be left unchanged.