No plugins to update
Your site’s features are part of the product. No third-party plugin can open a security hole.
Your site and your logins are protected, with no setup
Your site has no WordPress plugins, so no security hole can come from a plugin. On a new device, your password isn’t enough to get in.
A code on every new device
An email for every suspicious login
Your visitors’ answers encrypted
Bots kept out
You know right away if someone tries to get in
Your account opens all your sites. Its protection is in place from day one, with nothing to turn on.
A code on top of the password
On a device your account doesn’t know, a code is emailed to you after the password.
With an authenticator app, the code is asked for at every login. You get backup codes for the day you lose your phone.
A link to shut everything down if it wasn’t you
Every security email carries the This wasn’t me link. One click signs out all your devices. Then you change your password.
With an authenticator app, you get an email at every login and another as soon as someone types your correct password but fails the code.
Your site closes the doors hackers come through
We keep the security of the server and the product up to date for you.
No admin on your live site
You work on the staging site. Your live site has no login page to attack.
A site kept apart from the others
A hacked neighboring site can’t reach yours.
Bots kept out
Bots looking for a security hole are banned. They stay out of your forms and your analytics.
Your visitors’ answers encrypted
Your site encrypts your visitors’ written answers before saving them.
An SSL certificate (HTTPS) that’s always valid
We create your domain name’s certificate and renew it before it expires.
Your data is protected all the way into the database
In a stolen copy of the database, your passwords and what your visitors write stay unreadable.
Unreadable passwords
Your password is never stored in plain text.
A code for every export
Exporting your requests or your site requires a code. The owners are notified.
Proof for every sensitive change
Changing your password or your email address requires your current password. You’re notified by email.
Can my WordPress site be hacked through a plugin?
No, your site doesn’t have any. We update WordPress, the product and the server for all sites at once.
What happens if someone steals my password?
They hit a wall at the code sent to your email address. You get an email and the This wasn’t me link signs everything out. Then change your password.
I’ve lost my phone. How do I log in?
With one of your backup codes, if you use an authenticator app. Then, from your account, you sign out the lost phone along with your other devices.
Does another client’s hacked site put mine at risk?
No. An intruder stays locked inside the site they took: they can neither read your files nor open your database.
Can the Lovely Render team log in to my site?
Yes, to help you out. Its account always goes through verification and its actions on your site are recorded in the history.
Does my site comply with GDPR?
Largely. Your data stays in France, your form answers are encrypted and your analytics are anonymous. Your site deletes data that is too old. The rest depends on how you use it and on your legal documents.