{"id":5269,"date":"2026-09-18T05:36:12","date_gmt":"2026-09-18T05:36:12","guid":{"rendered":"https:\/\/serverfellows.com\/blog\/?p=5269"},"modified":"2026-09-18T05:36:12","modified_gmt":"2026-09-18T05:36:12","slug":"white-label-hosting-security","status":"publish","type":"post","link":"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/","title":{"rendered":"White Label Hosting Security: Build a Layered Reseller Security Baseline"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"5269\" class=\"elementor elementor-5269\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9bf7e61 e-flex e-con-boxed e-con e-parent\" data-id=\"9bf7e61\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a70f7e8 elementor-widget elementor-widget-image\" data-id=\"a70f7e8\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"536\" src=\"https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/09\/White-Label-Hosting-Security-Build-a-Layered-Reseller-Security-Baseline-1024x536.png\" class=\"attachment-large size-large wp-image-5287\" alt=\"\" srcset=\"https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/09\/White-Label-Hosting-Security-Build-a-Layered-Reseller-Security-Baseline-1024x536.png 1024w, https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/09\/White-Label-Hosting-Security-Build-a-Layered-Reseller-Security-Baseline-300x157.png 300w, https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/09\/White-Label-Hosting-Security-Build-a-Layered-Reseller-Security-Baseline-768x402.png 768w, https:\/\/serverfellows.com\/blog\/wp-content\/uploads\/2026\/09\/White-Label-Hosting-Security-Build-a-Layered-Reseller-Security-Baseline.png 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52b01c4 elementor-widget elementor-widget-text-editor\" data-id=\"52b01c4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#White_Label_Hosting_Security_Build_a_Layered_Reseller_Security_Baseline\" >White Label Hosting Security: Build a Layered Reseller Security Baseline<\/a><ul class='ez-toc-list-level-2' ><li class='ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Write_down_the_security_boundary\" >Write down the security boundary<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Isolate_client_accounts_wherever_the_platform_supports_it\" >Isolate client accounts wherever the platform supports it<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Control_privileged_access\" >Control privileged access<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Treat_the_customer_portal_as_a_security_boundary\" >Treat the customer portal as a security boundary<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Use_provider_security_features_as_layers_not_guarantees\" >Use provider security features as layers, not guarantees<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Keep_applications_updated\" >Keep applications updated<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Make_backups_independent_from_malware_assumptions\" >Make backups independent from malware assumptions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Protect_DNS_and_domain_ownership\" >Protect DNS and domain ownership<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Use_HTTPS_correctly_but_do_not_confuse_encryption_with_complete_security\" >Use HTTPS correctly, but do not confuse encryption with complete security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Decide_how_malware_alerts_become_incidents\" >Decide how malware alerts become incidents<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Monitor_changes_that_matter\" >Monitor changes that matter<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Secure_billing_and_automation_credentials\" >Secure billing and automation credentials<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Prepare_for_account_offboarding\" >Prepare for account offboarding<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Security_questions_to_ask_a_reseller_partner\" >Security questions to ask a reseller partner<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Common_security_mistakes_in_reseller_operations\" >Common security mistakes in reseller operations<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#FAQs\" >FAQs<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#1_What_is_white_label_hosting_security\" >1. What is white label hosting security?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#2_Is_a_WAF_enough_to_secure_client_websites\" >2. Is a WAF enough to secure client websites?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#3_How_does_client_isolation_reduce_white-label_hosting_security_risk\" >3. How does client isolation reduce white-label hosting security risk?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#4_How_often_should_WordPress_sites_be_updated\" >4. How often should WordPress sites be updated?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#5_Does_reseller_hosting_make_a_website_PCI_compliant\" >5. Does reseller hosting make a website PCI compliant?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#6_What_ServerFellows_security_features_should_be_verified_before_launch\" >6. What ServerFellows security features should be verified before launch?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/serverfellows.com\/blog\/white-label-hosting-security\/#Make_the_security_model_explainable\" >Make the security model explainable<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h1 dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:10pt;\"><span class=\"ez-toc-section\" id=\"White_Label_Hosting_Security_Build_a_Layered_Reseller_Security_Baseline\"><\/span><span style=\"font-size:22pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White Label Hosting Security: Build a Layered Reseller Security Baseline<\/span><span class=\"ez-toc-section-end\"><\/span><\/h1><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security is the combination of provider controls, reseller administration and customer-side practices that reduce risk across multiple hosted accounts. The upstream platform may supply network, server, and application-layer protections, but the reseller still controls account structure, user access, customer communication, maintenance workflows, and incident response.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The most important starting point is shared responsibility. A WAF does not replace software updates. Malware scanning does not replace backups. A white-label control panel does not eliminate the need for strong authentication. White label web hosting security works when every layer has a defined owner.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Write_down_the_security_boundary\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Write down the security boundary<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Private label hosting security should start by documenting which controls belong to the hosting platform and which belong to the reseller or client. A practical boundary might look like this:<\/span><\/p><div dir=\"ltr\" style=\"margin-left:0pt;\" align=\"center\"><table style=\"border:none;border-collapse:collapse;\"><colgroup><col width=\"226\"><col width=\"226\"><col width=\"226\"><\/colgroup><thead><tr style=\"height:0pt\"><th style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;background-color:#17365d;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\" scope=\"col\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#ffffff;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Layer<\/span><\/p><\/th><th style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;background-color:#17365d;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\" scope=\"col\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#ffffff;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Typical provider role<\/span><\/p><\/th><th style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;background-color:#17365d;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\" scope=\"col\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#ffffff;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Typical reseller\/client role<\/span><\/p><\/th><\/tr><\/thead><tbody><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Physical\/network<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Data center, network filtering<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Choose appropriate platform and region<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Hosting platform<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Isolation, patching of managed platform components<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Configure accounts and permissions<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Web application<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Server-side controls where provided<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Update CMS, themes, plugins and custom code<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Identity<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Authentication features<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Strong passwords, MFA, user lifecycle<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Backups<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Backup capability if included<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Verify scope, retention and restore process<\/span><\/p><\/td><\/tr><tr style=\"height:0pt\"><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Incident response<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Infrastructure investigation<\/span><\/p><\/td><td style=\"border-left:solid #000000 0.5pt;border-right:solid #000000 0.5pt;border-bottom:solid #000000 0.5pt;border-top:solid #000000 0.5pt;vertical-align:middle;padding:4pt 5.4pt 4pt 5.4pt;overflow:hidden;overflow-wrap:break-word;\"><p dir=\"ltr\" style=\"line-height:1.2;margin-top:0pt;margin-bottom:0pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Customer communication and application remediation<\/span><\/p><\/td><\/tr><\/tbody><\/table><\/div><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security claims should reflect this boundary. Avoid telling a client that the hosting service makes their website completely secure.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Isolate_client_accounts_wherever_the_platform_supports_it\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Isolate client accounts wherever the platform supports it<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Branded hosting security needs clear tenant boundaries because one reseller account can contain many customer sites. The way those sites are separated is therefore a fundamental buying criterion.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Private label hosting security should avoid placing unrelated clients into one website account merely for convenience. Separate accounts can improve credential boundaries, resource controls, backup handling and handover. In cPanel-based reseller environments, WHM reseller privileges are designed around managing cPanel accounts owned by the reseller, illustrating why account structure matters operationally.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Ask how the actual platform isolates websites and customers. Do not infer isolation from the word \u201creseller\u201d alone.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Control_privileged_access\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Control privileged access<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Reseller administrators can often create accounts, change packages or view sensitive configuration. Keep that privilege narrow.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security should use named administrator accounts rather than shared logins, enable MFA where available, and remove access promptly when staff leaves. Customer users should receive only the permissions needed for their role.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">If contractors need temporary access to one website, prefer a scoped account or application credential over sharing the master reseller login. Record who has access to DNS, billing, and hosting administration because these are separate high-impact capabilities.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Treat_the_customer_portal_as_a_security_boundary\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Treat the customer portal as a security boundary<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White-label branding can create a polished experience, but security depends on authorization, not appearance. Test whether one client can reach another client\u2019s service by changing an identifier, URL, or request parameter. Verify password reset flows, session expiry, and privileged actions.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label web hosting security should also test single sign-on into the hosting control panel if provided. The convenient jump from billing portal to technical controls must preserve the same user and account restrictions.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Branded hosting security should be tested with production-like accounts that have intentionally different permissions. A test where everyone is an administrator proves very little.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Use_provider_security_features_as_layers_not_guarantees\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Use provider security features as layers, not guarantees<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The supplied ServerFellows launch specification lists a WAF, malware scanning, and brute-force protection, along with free SSL and private branded nameservers. These controls can reduce common risks when correctly implemented, but none makes a site unhackable.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security evaluation should verify how each feature actually works in the live service. Is malware scanning automatic or on demand? Can the reseller see detections? Who performs remediation? Does the WAF allow customer-level rules? What does brute-force protection cover?<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A feature is operationally useful only if the team knows what happens when it triggers.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Keep_applications_updated\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Keep applications updated<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For WordPress and other CMS platforms, application maintenance remains a major part of the security model. For WordPress workloads, security hygiene includes promptly maintained core, themes, and plugins rather than leaving outdated application code exposed.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Private label hosting security should define whether updates are the customer\u2019s responsibility, included in an agency care plan, or managed through reseller tooling. If automatic updates are used, pair them with backups, staging, or a rollback procedure appropriate to the application.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Do not silently turn on broad update policies across a client portfolio without considering compatibility and business impact.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Make_backups_independent_from_malware_assumptions\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Make backups independent from malware assumptions<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Private label hosting security should treat backup as a recovery control, not proof that the environment is secure. If compromised files are backed up repeatedly, the newest restore point may still contain the problem.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security should know what is backed up, how often, how long copies are retained, and whether restores can be tested. Important clients may require an additional copy under the reseller or customer\u2019s separate control, depending on risk and contractual requirements.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A restore test is more useful than a dashboard badge that simply says \u201cbackup enabled.\u201d<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Protect_DNS_and_domain_ownership\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Protect DNS and domain ownership<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Attackers do not need to compromise the web server if they can redirect the domain. Keep domain registrar access and DNS administration protected with strong authentication and tightly controlled users.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label web hosting security should document whether DNS is managed through private nameservers, a reseller panel, or an external provider. For high-impact record changes, verify requester authorization and preserve a record of the previous value.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">If a client owns the domain independently, record that fact. The reseller should not create a support process that implies it can recover a registrar account it does not control.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Use_HTTPS_correctly_but_do_not_confuse_encryption_with_complete_security\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Use HTTPS correctly, but do not confuse encryption with complete security<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Free SSL certificates are now common and useful for encrypting web traffic. They do not validate application code, stop every attack, or make a compromised site trustworthy.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security should confirm certificate issuance, renewal, and failure handling for hosted domains. Monitor for expired certificates if the platform does not handle renewal reliably.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For ecommerce and login pages, HTTPS is foundational, but it sits alongside application security, payment-provider controls, access management and monitoring.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Decide_how_malware_alerts_become_incidents\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Decide how malware alerts become incidents<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Branded hosting security should turn a scanner alert into a documented workflow rather than an improvised response. First, preserve evidence and identify scope. Then decide whether the site should be isolated, whether credentials need to be reset, which files or accounts are affected, and how the customer will be informed.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Private label hosting security incident procedures should avoid immediately deleting suspicious files without understanding business impact. A modified file may be malicious, but removing it can also break an application and erase evidence.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Define who can approve containment and who owns application cleanup when the reseller only provides hosting.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Monitor_changes_that_matter\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Monitor changes that matter<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Logs are valuable when they answer an operational question. Track administrator logins, package changes, DNS edits, important customer-user changes, and security events where the platform exposes them.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security is stronger when suspicious activity can be tied to a named user and time. Retention should follow the reseller\u2019s own security and privacy policies rather than keeping every log forever without purpose.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For application-specific monitoring, decide whether it is included in the service or remains the client\u2019s responsibility.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Secure_billing_and_automation_credentials\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Secure billing and automation credentials<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Hosting-business automation may possess API credentials capable of creating, suspending, and terminating accounts. Payment gateways may store tokens or other sensitive configuration through the billing platform.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label web hosting security should restrict access to those settings and use the minimum API permissions supported by the platform. Keep secrets out of public repositories and shared documents. When a staff member with privileged access leaves, include hosting and billing integrations in the credential-rotation checklist.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A compromised billing administrator can be as damaging as a compromised hosting administrator.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Prepare_for_account_offboarding\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Prepare for account offboarding<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The private-label security model responsibilities continue when a client leaves. Define what happens to control-panel users, SFTP or SSH accounts, API keys, DNS permissions, backups, and retained customer data.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security should remove access that no longer has a business purpose while preserving data for any agreed retention or handover period. Do not delete everything instantly if the contract promises an export window, and do not retain active credentials indefinitely after service ends.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">If a developer is being replaced, the client may need a structured credential reset even though the hosting account itself remains active.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Security_questions_to_ask_a_reseller_partner\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Security questions to ask a reseller partner<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">A buyer should request specific evidence rather than accepting \u201csecure hosting\u201d as a feature.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Ask:<\/span><\/p><ul style=\"margin-top:0;margin-bottom:0;padding-inline-start:48px;\"><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">How are unrelated client accounts separated?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Which users can access reseller administration?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Is MFA available for reseller and customer users?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Which WAF or traffic-filtering controls are included?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">How are malware detections surfaced and handled?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">What backup and restore capabilities exist?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">How are platform patches managed?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">What logging can the reseller access?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:0pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">How are security incidents escalated?<\/span><\/p><\/li><li dir=\"ltr\" style=\"list-style-type:disc;font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;margin-left: -18pt;\" aria-level=\"1\"><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\" role=\"presentation\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Which features remain the customer\u2019s responsibility?<\/span><\/p><\/li><\/ul><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The private-label security model is easier to sell honestly when the reseller has written answers to these questions before the client asks.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Common_security_mistakes_in_reseller_operations\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Common security mistakes in reseller operations<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">The recurring mistakes are mostly operational: using one master password across staff, hosting unrelated clients in one account, failing to remove former users, treating a malware scan as a guarantee, never testing restores, allowing anyone to request DNS changes, and promising compliance because the provider advertises a certification.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security should also avoid blanket statements such as \u201cDDoS-proof\u201d or \u201cPCI compliant by default.\u201d Compliance depends on the scope of the customer\u2019s environment and responsibilities. Hosting controls can support compliance; they do not automatically complete it for every business.<\/span><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Branded hosting security also depends on closing stale accounts and credentials quickly.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"FAQs\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">FAQs<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"1_What_is_white_label_hosting_security\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">1. What is white label hosting security?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security is the security model for a reseller-branded hosting service. It combines upstream infrastructure controls with reseller account management, customer permissions, application maintenance, backups, DNS protection, and incident response. The exact responsibilities depend on the platform and service contract. The reseller should explain those boundaries instead of implying that white-label branding changes the underlying security risks.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"2_Is_a_WAF_enough_to_secure_client_websites\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">2. Is a WAF enough to secure client websites?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">No. A web application firewall can block or challenge some malicious traffic, but it does not replace secure application code, updates, strong credentials, account isolation, or incident response. White label web hosting security should use a WAF as one layer. Confirm what it covers, how rules are managed, and what happens when an alert or block affects a legitimate customer request.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"3_How_does_client_isolation_reduce_white-label_hosting_security_risk\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">3. How does client isolation reduce white-label hosting security risk?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Where the platform supports practical account separation, it is generally preferable for unrelated customers because it creates clearer credential, quota, backup, and handover boundaries. Branded hosting security should still verify how the provider implements isolation underneath those accounts. A separate login is useful, but the reseller should understand the actual platform architecture rather than assuming visual separation equals technical isolation.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"4_How_often_should_WordPress_sites_be_updated\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">4. How often should WordPress sites be updated?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">There is no universal schedule that fits every site. The important principle is to apply supported security and maintenance updates promptly through a controlled workflow. The private-label security model for an agency portfolio may combine monitoring, backups, staging, and scheduled maintenance. Critical vulnerabilities may justify faster action than routine feature updates. The service agreement should state whether the reseller or the client owns this work.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"5_Does_reseller_hosting_make_a_website_PCI_compliant\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">5. Does reseller hosting make a website PCI compliant?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">No. Hosting features may support a PCI DSS program, but compliance depends on the merchant\u2019s payment architecture, systems, processes, and defined scope. White label hosting security content should not tell customers they are automatically compliant because a provider uses certain infrastructure controls. Businesses handling payment-card data should assess their actual obligations and use qualified guidance where required.<\/span><\/p><h3 dir=\"ltr\" style=\"line-height:1.295;margin-top:9pt;margin-bottom:3pt;\"><span class=\"ez-toc-section\" id=\"6_What_ServerFellows_security_features_should_be_verified_before_launch\"><\/span><span style=\"font-size:12pt;font-family:Roboto,sans-serif;color:#2f5597;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">6. What ServerFellows security features should be verified before launch?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">For the proposed service, the product brief includes a WAF, malware scanning and brute-force defences, alongside SSL and a brandable control panel. Before publishing detailed claims, test the live ServerFellows implementation: how alerts appear, what the reseller can configure, which events are logged, how restores work and what support does during an incident. Treat each feature as one control in a layered model rather than a guarantee against compromise.<\/span><\/p><h2 dir=\"ltr\" style=\"line-height:1.295;margin-top:12pt;margin-bottom:5pt;\"><span class=\"ez-toc-section\" id=\"Make_the_security_model_explainable\"><\/span><span style=\"font-size:15pt;font-family:Roboto,sans-serif;color:#17365d;background-color:transparent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Make the security model explainable<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">White label hosting security should be simple enough that sales, support, and technical staff describe the same responsibility boundary. The provider secures and operates the parts it controls; the reseller manages its privileged access and service procedures; the customer or agency maintains the application tasks assigned to it.<\/span><\/p><p><\/p><p dir=\"ltr\" style=\"line-height:1.295;margin-top:0pt;margin-bottom:6pt;\"><span style=\"font-size:10.5pt;font-family:Roboto,sans-serif;color:#202833;background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre;white-space:pre-wrap;\">Use separate client accounts, strong authentication, tested backups, and a documented incident path as the baseline. Add WAF, malware scanning, automated updates and monitoring as layers around that foundation. Security improves when ownership is explicit, not when the marketing vocabulary becomes stronger.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>White Label Hosting Security: Build a Layered Reseller Security Baseline White label hosting security is the combination of provider controls, [&hellip;]<\/p>","protected":false},"author":25481,"featured_media":5287,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[187],"tags":[],"class_list":["post-5269","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business-hosting-security"],"_links":{"self":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts\/5269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/users\/25481"}],"replies":[{"embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/comments?post=5269"}],"version-history":[{"count":13,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts\/5269\/revisions"}],"predecessor-version":[{"id":5304,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/posts\/5269\/revisions\/5304"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/media\/5287"}],"wp:attachment":[{"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/media?parent=5269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/categories?post=5269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serverfellows.com\/blog\/wp-json\/wp\/v2\/tags?post=5269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}