When a website is hosted well, nobody thinks about it. It loads quickly, it is always up, and if something breaks it is restored before customers notice. When it is hosted badly, it becomes a recurring source of stress. This article looks at the three things that separate a properly hosted website from a cheap one — security, backups and uptime — why they matter for businesses in Didcot, Abingdon and across Oxfordshire, and how to check your own arrangement.
Security: assume you are a target
Small business owners often assume attackers are not interested in them. In practice the great majority of website attacks are automated. Bots scan the entire web looking for known weaknesses — out-of-date software, weak passwords, vulnerable plugins, exposed configuration files — and exploit whatever they find, regardless of whose site it is. Industry incident reports consistently show that most compromises exploit vulnerabilities for which a fix was already available, sometimes for months.
A properly hosted website defends against this with:
- Prompt updates — server software, and for a WordPress site the core, theme and plugins, kept current
- A web application firewall — filtering malicious requests before they reach the site
- Malware scanning — with alerts and a defined clean-up process
- Login protection — limits on failed attempts, strong enforced passwords, and two-factor authentication for admin accounts
- Least-privilege access — people have the access they need and no more, and old accounts are removed
- HTTPS everywhere — a valid SSL certificate on every page
- Hardening — disabling file editing in the admin, blocking access to sensitive files, and removing version give-aways
What happens when a site is compromised
It is worth being clear about the cost of getting this wrong. A hacked site may be defaced, quietly used to send spam, injected with content that damages your search rankings, or used to serve malware to your own visitors, at which point browsers and Google may block the site with a warning. Recovery without a clean backup can mean rebuilding from scratch, and the reputational hit with customers who saw the warning lingers. Prevention is dramatically cheaper than cure.
Backups: only real if they have been restored
A backup you have never tested is a hope, not a safeguard. Proper backup practice means:
- Automated — daily at minimum, more often for busy e-commerce sites
- Off-site — stored somewhere separate from the main server, so a server failure does not take the backups with it
- Versioned — enough history to go back to before a problem started, not just to last night
- Tested — periodic trial restores to confirm the backups actually work and are complete
- Fast to restore — a defined process so recovery takes hours, not days
- Inclusive — files and database together, so a restore brings back a working site, not half of one
Ask anyone hosting your site to confirm all six in writing.
Uptime: what the numbers mean
Uptime is the percentage of time your site is reachable. The figures sound similar but the difference is large:
- 99 per cent uptime allows around 3 days 15 hours of downtime a year
- 99.9 per cent allows around 8 hours 45 minutes a year
- 99.99 per cent allows around 52 minutes a year
For most Oxfordshire small businesses, 99.9 per cent is a reasonable target. Achieving it needs resources that are not massively oversold, a stable server stack, monitoring that alerts someone the moment the site goes down, and support that responds quickly. Cheap shared hosting rarely delivers this consistently, because your site’s performance depends on every other site on the same server.
A hosted website should be a service, not just space
The phrase “hosted website” should mean that hosting, security, backups, monitoring and support are handled for you as a package. Buying disk space and being left to manage everything yourself is not the same thing, and for a business without in-house IT it is a false economy — the cost saved is small and the risk carried is large. A managed arrangement also means that when there is a problem, responsibility is clear rather than being passed between a hosting company, a developer and you.
How to check your current setup
- Do you know who hosts your site, and is the account in your business’s name?
- When was the last time a backup was restored successfully?
- Is there a firewall and malware scanning, or just a server?
- Would you be told about downtime by monitoring, or by a customer?
- If the site went down tonight, who do you call, and how fast do they answer?
If any answer is uncomfortable, it is worth reviewing.
How B Bizzi hosts
The websites we build and manage run on a modern, properly resourced stack with SSL, server-level caching, a firewall, malware scanning, automated and tested off-site backups, uptime monitoring, and a staging environment for safe changes. Support comes from the Witney team that knows your site, so one call reaches someone who can act.
Local to Oxfordshire
B Bizzi is based in Witney and hosts websites for businesses in Didcot, Abingdon, Oxford, Woodstock, Burford, Bicester, Banbury and Kidlington.
Talk to B Bizzi
To have your website hosted the right way, call B Bizzi on +44 7973 693972, email hello@bbizzi.co.uk, or use the contact form at https://beebizzi.co.uk. We are based in Witney, Oxfordshire.