Website & web app protection
Firewall, malware scanning, updates, backups and monitoring, every day.
Cyber security for businesses
We protect websites and web applications, secure your logins, test your systems the way a hacker would, and respond fast when something goes wrong. Clear prices, plain-language reports, local team.
Your website is protectedLast scan 4 minutes ago
LiveIllustrative timeline
A real engineer replies within 15 minutes, day or night.
ONIOSOFT SecurityEmergency line · online
Under attack? Message us any time. First reply within 15 minutes.
Our site shows a strange page. Help!
Rahim, ONIOSOFT Security. I'm on it. Please don't change anything.
All clear. Your site is clean and back online.
60-second self-check
Answer six quick questions. Nothing is sent anywhere: your result appears right here.
Have your website plugins or software gone more than a month without updates?
Most hacks use known holes in old plugins and themes.
Is there no recent backup that you have actually tested?
Without a working backup, one hack or mistake can mean starting again.
Do staff share passwords, or use the same password on several sites?
One leaked password then opens many doors.
Can people log in with only a password, without a code on their phone?
2-step verification stops most account takeovers.
Could someone send email that looks like it came from your company?
Without SPF, DKIM and DMARC, scammers can pretend to be you.
Would you only find out about a hack when a customer complains?
Monitoring tells you within hours, not weeks.
Answer the 6 questions to see your result.
A quick guide, not a full security test.
What we do
Firewall, malware scanning, updates, backups and monitoring, every day.
2-step verification for email, website, social media and banking logins, plus a password manager for your team.
We test your website or web application the way a hacker would, then show you exactly what to fix.
Find out what happened on a device: recovered data, malware or unauthorised access, with a formal report.
Website or web app attacked? We contain it, clean it, find how they got in and close the door.
SPF, DKIM and DMARC, so nobody can send email pretending to be your company.
Prevent · Detect · Respond
Good security is not one tool. It is three layers working together.
A firewall, regular updates, strong logins and safe settings stop most attacks before they start.
If a plugin on your site has a known security hole, we update it the same day, before anyone can use it.
Scans and monitoring watch your site around the clock and alert us the moment something changes.
If a strange file appears at 2 am, the scan catches it and we remove it before your customers ever see it.
If something gets through, we contain it, clean it, restore from backup and close the hole, with a clear report.
If your site starts sending visitors to a fake page, we take it back, clean it and explain exactly what happened.
Website Protection plans
Prices are per website. Pay monthly, or pay yearly and get 12 months for the price of 10.
Yearly = pay for 10 months, use 12.
| Feature | Essential | Business | Advanced |
|---|---|---|---|
| Price per website | ৳1,500 / mo ৳15,000 / year | ৳3,000 / mo ৳30,000 / year | ৳6,000 / mo ৳60,000 / year |
| Malware scan | Daily | Every 6 hours | Every hour |
| Firewall & login protection | Included | Included | Included |
| Hack clean-up included | 1 per year | Unlimited | Unlimited |
| Response time | 24 hours | 12 hours | 4 hours |
| Backups | Weekly | Daily | Daily + off-site |
| Email security (SPF / DKIM / DMARC) | –Not included | Included | Included |
| SSL & uptime monitoring | Included | Included | Included |
| Monthly report | –Not included | Included | Report + call |
Response time is how quickly we start working after a problem is detected or reported. Each plan covers one website; choose the number of websites above.
Professional services
Fixed prices where the job is standard. Where it depends on size, you get a written quote after a short call.
Updates, login protection, backups and a malware scan for a site that isn't on our plans, with a short report.
2-step verification for email, website, social media and banking logins, plus a password manager for your team. Up to 10 users.
An authorised, safe attempt to break into your website the way a hacker would, with a report of every weak point and how to fix it.
In-depth testing of a web application or portal: logins, user roles, data and APIs, with a full report and a re-test after fixes.
Find out what happened on a phone or laptop: recovered data, malware or unauthorised access, with a formal written report. Price per device.
Website or web application attacked? We contain the attack, clean it up, find how they got in and close the door, then report what happened.
Penetration tests and forensics are only carried out on systems and devices you own or are legally authorised to have tested.
Emergency help
Stay calm and do these three things. Then message us: we start straight away.
Files and logs show how the attacker got in. Deleting them makes recovery harder.
Start with hosting, website admin and email, from a clean device.
Send your website address and what you noticed. We reply and start the investigation.
How it works
We look at your website, logins and email settings, with your permission, using a temporary account.
You get a clear report: what we found, how serious it is and what to do, in plain language.
We fix the problems, or your team does using our step-by-step notes.
Stay protected with a monthly plan, monitoring and regular checks.
Sample report
Every check ends with a report like this, written so that anyone in your business can understand it.
Example only. Your report depends on what we find.
Platforms
We secure websites, online stores and web applications built on:
Business websites, blogs and WooCommerce stores.
Custom websites, portals and admin panels.
Web apps and APIs built with Node.js and Express.
Shopify, WooCommerce and custom shops.
Modern front ends and their back-end APIs.
The servers and APIs your mobile app talks to.
Trust & confidentiality
We sign a non-disclosure agreement before we start, if you need one.
We use a separate account for the job and remove it when we finish.
We only test systems you own or are authorised to test, and only examine devices you own or are legally allowed to examine.
Forensic work ends with a formal written report you can give to lawyers, the police or a court. Whether a court accepts it is for the court to decide.
FAQ
Usually not. Most checks and fixes happen in the background. If a short break is needed, we agree the time with you first.
No. We ask you to create a temporary account for us, and we remove it when the job is finished.
No. We also secure Laravel and other PHP sites, Node.js apps, online stores, web applications and their APIs.
An authorised, safe attempt to break into your website or application, the way a real hacker would. You get a report of every weak point and how to fix it.
Yes, if it is your device or you are legally authorised to have it examined. We recover data, check for malware or unauthorised access, and give you a formal report.
On the Business and Advanced plans, clean-up is included with no limit. On Essential, one clean-up per year is included.
Message us on WhatsApp and we start as soon as we can. Protection plan customers get the response time of their plan.
Start with a security check, or talk to us about what you need.