Untested backups are wishful thinking. We set up automated off-site snapshots, run real restore drills every month and write the incident runbook your team needs at 3am. Daily or hourly frequency, S3 and Backblaze B2 storage, one-click rollback, documented RTO and RPO targets you can show the board.
Most WordPress sites have backups that nobody has ever restored. The host takes a nightly snapshot, the dashboard shows a green tick and everyone assumes recovery is a one-click story. It never is. Broken dumps, missing uploads, out of date offsite copies, a plugin that writes data to a custom table nobody included in the archive.
We treat backup and disaster recovery as one practice. Off-site copies on independent infrastructure, hashed for integrity, restored into a throwaway sandbox on a schedule. Real RTO and RPO numbers, a written incident runbook, on-call procedure when minutes matter. If it has not been restored, it is not a backup.
A structured rollout. You see the inventory, the storage layout, the schedule and the first restore drill before we go live. No surprise invoices, no untested archives sitting on a shelf.
We map every data source on your site, files, uploads, database tables, custom storage, and set realistic RPO and RTO targets with you. Commerce, membership and high traffic sites get tighter windows than a brochure site.
We provision S3 or Backblaze B2 with least-privilege IAM, lifecycle rules, versioning and immutable retention. Encryption in transit and at rest, keys held by you, geo separated from the production host.
Daily, hourly or streaming database backups depending on tier. Pre and post hooks for plugin updates, checksum verification on upload and alerts when a job fails or takes longer than expected.
A monthly restore into a sandbox environment, validated with a smoke test. You get a written report, a dated runbook and a named on-call contact so recovery is not improvised when you actually need it.
A plugin backup is not a DR plan. A host snapshot is not off-site. Here is how we stack up on work that actually brings a site back when it matters.
Pricing reflects site size, commerce scope and recovery target, not hours burnt. Pick a tier close to your needs or ask for a custom estimate after the audit.
Single WordPress site, daily off-site backups, quarterly restore drill. For blogs and brochure sites that simply need a safety net.
WooCommerce or membership site, hourly database and daily full, monthly restore drill. Order and member data never more than an hour behind.
High traffic or multisite. Streaming database backups, hourly full, tighter RTO, monthly drills and on-call response inside business hours.
Regulated or mission critical. Immutable retention, audit trail, 24 by 7 on-call response and quarterly business continuity review.
We do not close a backup ticket on a green dashboard. Recovery has to hold up against a real restore, real traffic and a real clock.
Every archive lands on storage that is not the production host so a lost server never means a lost site.
Object versioning with lifecycle rules, so a silent corruption a week ago is still recoverable today.
TLS in transit, SSE on storage, customer held keys on Enterprise. No plain archives on shared drives.
Every upload is hashed and checked. A silently truncated archive is flagged before the next schedule runs.
A monthly sandbox restore, with a written report, proves recovery works before you need to rely on it.
Failed jobs page our on-call engineer first. Your team hears from us only when action is needed.
Targets are agreed after the audit and reviewed every quarter. No vague promises, no moving goalposts.
Site down, hacked, database corrupted, every scenario has a written playbook before the first real incident.
Every restore triggers a root cause review and a change to the backup pipeline or runbook where needed.
We are the silent backup and DR team behind agencies that host, maintain or support WordPress sites. Your clients see your runbook, your restore reports and your brand on every artefact. Our name never appears in the dashboard, the email alerts or the incident call.
Runbooks, drill reports and incident post-mortems carry your brand, not ours.
One point of contact across every client. Shared Slack, scheduled reviews, fast replies when sites go down.
Per-site rates, bulk discounts and priority scheduling for agency partners with recurring care work.
We plug into your ticketing, your monitoring, your on-call rotation. No tool switching for your team.
You send host access, plugin list and any regulatory constraints around data storage and retention.
We inventory the site, write the runbook and send you a partner rate quote. Never shown to your client.
You mark up, brand the proposal and present it on your letterhead at your price.
Your client signs off on the retention, RTO and drill schedule with your brand and pays you directly.
Silent setup, monitoring and drills. No vendor credits, no email signatures, no footer links from us.
You review the drill report each month, accept handover and ship it to your client under your agency name.
Yes. Host snapshots live on the same infrastructure as your site. If the host account is compromised, locked or billing lapses, those snapshots go with it. We keep copies on independent storage under your account, so a lost host never means a lost site.
Every month on Studio and higher. We pull the latest archive into a sandbox environment, bring the site up, run smoke tests on login, checkout and key flows, and email a written report. If a drill ever fails, we fix the backup pipeline before the next scheduled job.
Depends on tier and site. A brochure site on daily backups is a four hour RTO and 24 hour RPO. A WooCommerce store on streaming database backups is typically a one hour RTO and under 15 minute RPO. We commit to numbers in writing after the audit.
We default to Backblaze B2 or AWS S3 in a region you choose. Storage sits under your account, with an IAM user we rotate regularly. Encryption keys are yours. If you cancel, you keep the buckets and the data.
Yes. Every plan includes incident response within the on-call window for that tier. Site down, hacked or database corruption, we work the runbook with your team, restore from the last clean archive and write a post-mortem so the root cause is fixed, not just the symptom.
Recovery from a clean archive is included. A full security hardening project, malware removal across a compromised host and attack surface review sit on our Security Hardening page. After a restore, most teams bundle the two so the door is shut behind the fix.
Share the current host, any regulatory constraints and the downtime you can tolerate. A recovery engineer will respond with an audit outline and a written scope within one business day.