SteboSecure
Security that scales with you
Three tiers of website security — from baseline protection included with every hosting plan to advanced WAF, malware cleanup and priority incident response. Choose the level your business needs.
- Free tier included
- WAF on Pro & Business
- Malware cleanup included
- M-Pesa billing
Defence in depth
Nine layers of protection
Every layer runs on every plan from the moment your account is created. Higher tiers add active defence on top of this foundation.
Cloudflare edge
Traffic passes through Cloudflare first. Bot filtering, rate limiting and DDoS absorption happen at the edge, before requests ever reach our servers.
Server firewall
A host-level firewall filters traffic at the network edge. Only approved ports are open; everything else is dropped by default.
CloudLinux isolation
Every account is caged with its own CPU, memory and process limits. A compromised site cannot read another account's files or exhaust shared resources.
Malware scanning
Imunify360 scans every account daily, quarantines infected files automatically and alerts you — so a compromised upload never sits unnoticed for weeks.
Web Application Firewall
A managed WAF inspects every request and blocks SQL injection, XSS and known exploit patterns before they reach your application. Rules update automatically.
Patch & update management
Server software, control panel and PHP versions are patched promptly. We track CVEs and apply security updates on a regular schedule — not when we remember.
Multi-factor authentication
MFA is available on cPanel, the customer portal and admin areas. We encourage it everywhere and require it for staff access.
Logging & audit trails
Every administrative action — provisioning, billing, support access — is logged with who, what, when and why. Nothing happens silently.
Backups
Daily backups with 7-day retention and one-click restore. Higher tiers add off-site replication so a server-level failure does not take your backups with it.
SteboSecure tiers
Three levels of protection
Start free with every hosting plan. Upgrade to Pro or Business when your site needs active defence and faster response.
SteboSecure Free
Baseline protection on every hosting plan — no extra cost, no configuration.
Included
- Automatic SSL (Let's Encrypt, renewed for you)
- Cloudflare edge protection (bot filtering, DDoS absorption)
- Daily malware scanning with automatic quarantine
- Server firewall (host-level, default-deny)
- CloudLinux account isolation
- Brute-force protection on login endpoints
- Daily backups with 7-day retention
- 24/7 infrastructure monitoring
SteboSecure Pro
Active defence for business sites that need WAF, monitoring and faster response.
KES 3,500/year
- Everything in SteboSecure Free, plus:
- Managed Web Application Firewall (WAF) with auto-updating rules
- Advanced malware scanning with scheduled reports
- Brute-force protection with IP reputation blocking
- Security monitoring with alerting
- 30-day backup retention with off-site replication
- Security score dashboard with actionable steps
- Priority support response on security incidents
SteboSecure Business
Advanced protection for mission-critical sites with incident response and vulnerability monitoring.
KES 7,500/year
- Everything in SteboSecure Pro, plus:
- Advanced WAF with custom rule tuning
- Malware cleanup by our team (included, not per-incident)
- Vulnerability monitoring for CMS plugins and themes
- 90-day backup retention with off-site replication
- Priority incident response with dedicated engineer
- Quarterly security review and hardening report
- Dedicated security contact and escalation path
Compare the tiers
Feature-by-feature comparison
See exactly what each tier includes so you can choose the right level of protection.
| Feature | Free | Pro | Business |
|---|---|---|---|
| Automatic SSL | Included | Included | Included |
| Cloudflare edge protection | Included | Included | Included |
| Malware scanning | Daily scan | Daily scan + reports | Daily scan + cleanup |
| Web Application Firewall | — | Managed WAF | Advanced WAF + custom rules |
| Brute-force protection | Basic rate limiting | IP reputation blocking | IP reputation + custom rules |
| Backup retention | 7 days | 30 days + off-site | 90 days + off-site |
| Security monitoring | Infrastructure only | Account-level + alerting | Account-level + priority |
| Malware cleanup | Self-serve from backup | Guided cleanup | Full cleanup by our team |
| Vulnerability monitoring | — | — | CMS plugins & themes |
| Incident response | Standard queue | Priority queue | Dedicated engineer |
| Security review | — | — | Quarterly hardening report |
| Support response | Standard | Priority | Dedicated contact |
| Price | Included | KES 3,500/year | KES 7,500/year |
Why security matters
Security is not optional — it is infrastructure
The internet does not distinguish between small sites and large ones. Bots attack everything, and the cost of recovery always exceeds the cost of prevention.
Attacks are automated
Bots scan the internet 24/7 for vulnerable plugins, weak passwords and exposed admin panels. They do not care how small your site is — they try everything, everywhere, all the time.
Reputation is fragile
A single malware injection can get your site flagged by Google, blocked by browsers and blacklisted by email providers. Recovery takes days; prevention takes minutes.
Downtime costs money
Every minute your site is offline is lost revenue, lost trust and lost search ranking. Security incidents are the most common cause of unplanned downtime.
Compliance is required
If you collect customer data, Kenya's Data Protection Act (and GDPR for EU users) requires reasonable security measures. A breach without them is a legal liability.
Your customers trust you
Visitors enter passwords, personal details and payment information on your site. That trust is your responsibility — and a breach breaks it permanently.
Recovery is expensive
Cleaning a compromised site costs far more than preventing the compromise. A security plan is an investment; incident cleanup is an emergency.
Security FAQ
Website security questions, answered
What each tier includes, how it works and when to upgrade.
Not sure which tier you need?
Tell us about your site and we will recommend the right level of protection — no upsell pressure.