CYBERSECURITY AND WAF
Site protection
against hacks and attacks
Professional website protection against hacks, DDoS attacks, viruses, spam, and malicious code. Security audit, Cloudflare WAF configuration, and emergency website cleanup after a hack.
WAF
OWASP
HARDENING
AUDIT
CLEANUP
MONITORING
security
PROTECTION
CONTROL
STABILITY
projects
of studio
models
Premier Partner status
marketing, analytics
Protect your website, customer data, and search engine rankings
Cyberattacks on the internet have long been automated. Special botnets continuously scan millions of websites searching for outdated CMS plugins, vulnerabilities to SQL injections, or weak admin passwords. A hacked website is not just a nuisance. It is a risk of leaking personal data of your clients, theft of payment information, and an instant loss of positions in Yandex and Google, as search engines mark infected resources with a warning "Site may be dangerous".
We provide comprehensive web resource protection. We conduct a deep security audit (penetration testing), find hidden vulnerabilities, configure traffic filtering against DDoS attacks, and implement a web application firewall (WAF Cloudflare/DDoS-Guard).
If your site has already been hacked, we will perform emergency cleanup: we will remove malicious code, find and close backdoors (hacker loopholes), update components, and submit requests to remove the site from search engine blacklists.
- Security audit of backend, DB, and plugins for XSS/SQLi
- Emergency website cleanup from viruses, hidden links, shells, and redirects
- Connection and fine-tuning of network-level DDoS protection (L3-L7)
- WAF (Web Application Firewall) Setup for Filtering Bot Traffic
- CMS configuration hardening (WordPress, Bitrix, OpenCart)
39 sec
Average frequency of automated hacker attacks on the internet
99.9%
Probability of protection against automated hacks after closing vulnerabilities
1-2 h
Response time to an emergency call in case of a hack and start of project remediation
0
Zero virus remnants thanks to file-by-file comparison with clean repositories
Security is not a one-time task
It is enough for hackers to find a single unpatched vulnerability in a feedback plugin to gain server access. We build a multi-layered defense system (Firewall, folder isolation, WAF) preventing hacking even if there are errors in the code.
Three milestones STARCODE protection
We build protection from the network layer to the application source code.
Traffic filtering (WAF)
We connect the website to the global filtering network Cloudflare or DDoS-Guard. All incoming load is analyzed at the network level: suspicious bots, spam scripts, and requests with exploits are blocked before they reach your server.
This reduces the load on your hosting and protects against resource depletion (DDoS).
CMS Hardening
Standard CMSs are vulnerable due to predictable paths. We change default admin login addresses, restrict access to system files `.htaccess` and `wp-config.php`, and block execution of any PHP scripts in folders containing user-uploaded images.
Even if an attacker uploads a virus to the website, running it on the server will be impossible.
File integrity control
If a virus penetrates a website, it often injects its code into template files or system libraries. We install automated scanners (such as Maldet / AIDE) that monitor any changes to backend files.
When adding or modifying any script, the security system immediately sends an alert to the engineers.
Stages of work on security
Sequential process of finding security loopholes, virus cleanup, and persistent firewall setup.
Vulnerability assessment (Penetration testing)
We scan the site with automated scanners OWASP ZAP, Nikto, and WPScan. We look for open ports, outdated PHP/CMS versions, and SQL injection vulnerabilities.
Cleaning and virus removal
Using Maldet and php-malware-finder, we find and remove hidden backdoors, spam shells, hidden redirects, and JS miners in the project code.
CMS Hardening
We hide the CMS version, change database table prefixes, block writing to system files, and restrict script execution in image directories (/uploads).
Cloudflare WAF connection
We proxy domain traffic through Cloudflare. We set up rules to block suspicious traffic, enable protection against L7 DDoS, and spam requests.
Access Rights Setup
We redistribute folder permissions (chmod 755/644). We implement two-factor authentication (2FA) for logging into the website admin panel.
Removal from blacklists
If the website was blocked, we send cleanup reports to Google Webmaster, Yandex Webmaster, and antivirus databases (Virustotal, Kaspersky), removing the threat flag.
Technologies
cybersecurity
We use modern port, code, and network traffic scanning tools.
Cloudflare WAF
Enterprise-grade web application firewall. Filters malicious HTTP traffic before it reaches the server, blocking bots, hacker exploits, scrapers, and spam activity.
OWASP ZAP & Nikto
Penetration testing tools. Scan the web application for critical vulnerabilities from the OWASP Top 10 list (SQLi, XSS, insecure settings).
LMD (Maldet) & ClamAV
Console server antiviruses. They specialize in detecting malicious PHP code (web shells, backdoors, spam senders) using updated virus databases.
— COST
Pricing website protection
The price depends on the site condition, CMS type, infrastructure components, and the scope of work.
| Features | Security Audit Vulnerability scanning and patch report 30 000 ₽ Timeframe: up to 5 days Order | Popular Audit and implementation Audit, virus removal, and security implementation 65 000 ₽ Timeframe: up to 7 days Order | Infrastructure protection Website, API, CRM and connected devices from 130 000 ₽ Timeframe: from 14 days Discuss |
|---|---|---|---|
Source code and plugin audit |
✓ Automatic express scan | ✓ Deep file-by-file code analysis | ✓ Website, API, and related components audit |
Removal of viruses, shells, and backdoors |
Identification in the report | ✓ Complete code and DB cleanup | ✓ Cleaning infected components and closing backdoors |
WAF connection (Cloudflare / DDoS-Guard) |
Configuration recommendations | ✓ Basic WAF Rules Setup | ✓ WAF rules for site and API, CDN and DDoS protection |
CMS Hardening |
— | ✓ Hiding admin panel, blocking PHP in uploads | ✓ Complete OS, web server, and CMS hardening |
Removal from search engine blacklists |
— | ✓ Submitting applications to Yandex/Google | ✓ Application submission and elimination of infection causes |
API, CRM, and network interactions |
— | — | ✓ Verification of website — API — CRM connection, permissions, and network rules |
Employee workstations |
— | — | ✓ Protection of connected devices and their access configuration |
SSH, administrative panels, and shells |
— | — | ✓ Configuration of SSH keys, administrator rights, and shell access |
Work completion and support |
14 days | 30 days | Verification of the entire connection, documentation and handover of settings |
— QUESTIONS AND ANSWERS
Everything that matters
about website protection
Is your website blocked by an antivirus or redirecting clients to third-party resources? Write to us — we will eliminate the threat as soon as possible.
-
Our site was hacked and search engines flagged it as dangerous. How quickly will the warnings be removed?
Immediately after contact, we perform a complete cleanup of website files and database from malicious code, remove backdoors, and fix vulnerabilities (usually taking from 4 to 12 hours). After that, we send reports and recheck requests to Yandex Webmaster and Google Search Console. Search engine crawlers recheck the site automatically. Usually, all red screens and warnings in search results are removed within 24–48 hours after submitting the request. -
Why would hackers hack our small website that has no sensitive information?
In 95% of cases, hacks are not targeted (directed personally against you). Botnets search for any vulnerable sites on popular CMSs. Hackers use a compromised site for technical purposes: 1) for hidden spam sending from your domain; 2) for hidden redirection of mobile users to scam sites; 3) for placing hidden links to prohibited resources (to boost their SEO ranking); 4) for utilizing your server resources in cryptocurrency mining. Protection is needed for a project of any scale. -
What is a Web Application Firewall (WAF) and how does it help protect a website?
Web Application Firewall (WAF) is a filtering shield installed between your website server and the Internet. WAF analyzes every incoming HTTP request in real time. If a request contains signs of a hacker attack (for example, SQL injection attempts in the search bar or malicious JS script insertion), the firewall instantly blocks this request even before it reaches the database or scripts of your website. We use advanced Cloudflare WAF rules. -
Will installing protection and traffic filtering slow down our website's speed?
No, on the contrary. Cloudflare works as a global content delivery network (CDN). It caches your website's static files (images, CSS, JS) and serves them to users from the servers closest to them in milliseconds. Simultaneously, Cloudflare cuts off junk traffic from malicious bots that simply scrape your content and overload the hosting CPU. As a result, the site starts loading significantly faster.