Security update: Your website is being protected

On 21 October, critical security vulnerabilities affecting PHP, the technology behind WordPress and many other websites, required urgent action across the hosting industry.

Castlegate IT worked closely with our hosting providers to prepare for the necessary security updates. Importantly, our hosting partners and Cloudflare implemented additional firewall protections before the security patches were released, helping to protect websites against attempts to exploit these vulnerabilities.

The necessary patches have now been applied across our main managed hosting environments. A small number of legacy environments remain protected by additional firewall measures while their updates are completed.

No action is required from our clients. We continue to monitor the situation and manage the necessary security measures on their behalf.

Category: Security

Online security visualisation

Website security doesn’t end at launch: why WordPress needs ongoing management

A WordPress website can be secure today and vulnerable tomorrow. Plugins change, vulnerabilities emerge, staff come and go, integrations are added and AI agents are beginning to interact directly with websites. We look at why website security requires ongoing management and why, for organisations that take security seriously, managed WordPress is a governance decision rather than simply a hosting choice.

by Castlegate IT 14 Aug 2026
An image to illustrate Castlegate's technical expertise

Castlegate’s technical insights hub

Practical case studies from our work managing complex websites. Every website presents its own technical challenges, and solving them well requires more than theory. This section shares the real problems we encounter, the investigations we carry out, and the solutions …

by Jim Semlyen 10 Aug 2026
A lock to illustrate the concept of cybersecurity

10 practical cybersecurity improvements small organisations can make this week

At a glance Use MFA wherever possible, especially for email, administrator accounts and sensitive systems. Avoid shared accounts and give people only the access they need. Protect your email domain with correctly configured SPF, DKIM and DMARC. Encrypt devices and …

by Jim Semlyen 1 Aug 2026

Maintenance and support services for WordPress websites

What is a website care plan? A website care plan is a proactive maintenance and support package designed to keep WordPress websites secure, fully operational, and optimised for high-performance. Care plans can cover everything from hosting, updates, and performance monitoring …

by Sunny Simmons 4 Jun 2025

Our most important work goes on behind the scenes. Let’s pull back the curtain.

It’s pretty obvious that Castlegate IT design and build striking, user-centric, professional, intuitive websites – even if we say so ourselves! You only need to browse our portfolio of work, check out our case studies, or take a look around …

by Sunny Simmons 19 Apr 2024

Ten ways to keep WordPress secure

The quality and security of a WordPress-based website relies on the knowledge and approach of the developers. We share our top ten developer considerations for keeping your installation secure.

by Andy Reading 22 Jul 2016

Why do websites get hacked?

In this article we explore the basics of website attacks, the motivation behind them, and some common ways in which attackers can get unauthorised access. This is not a technical article, and assumes no prior web security knowledge – it aims to provide an overview of the sort of website hacking that we see most often.

Our recipe for WordPress security

WordPress is a powerful and secure content management system (CMS) when used correctly. The quality and security of a WordPress-based website relies on the knowledge and approach of the developers. Castlegate IT are expert developers in WordPress and understand how to use it to build professional, robust and secure content-managed websites.