Solutions / Retail shops
Card payments protected. Online store kept current.
If you take cards, your processor expects you to follow PCI DSS. If you sell online, your store software needs patching like any website. We handle both, in plain English.
- 24h
- Critical patches applied, tested on a copy of your site first.
- Daily
- Off-site backups, kept for 30 days and restored on request.
- 5min
- Between uptime checks. We hear about problems first.
- 1page
- A plain-English report every month. No jargon.
How it works
Protected in 24 hours, then watched every day
Start with the free check. If you want us to fix what it finds, almost all the work is ours.
Your first month
Then one report a monthUp front
Free outside check
We look at your online store, email and logins the way an attacker would.
Within 24 hours
Urgent fixes
Store software and plugins updated, backups running, email locked down.
Weeks 1–2
Payments in order
Card systems on their own network and your PCI questionnaire answered honestly.
Every month
Watched and reported
Daily backups, patches within a day and a one-page report.
Questions from shop owners
What retailers ask us first
Our processor keeps asking for a PCI questionnaire.
That’s the self-assessment questionnaire. We help you work out which one applies, check each answer against your real setup and fix what isn’t true yet.
We use Shopify. Isn’t security handled?
Shopify secures the platform. You’re still responsible for staff logins, the apps you’ve installed, your email and the computers you run the store from.
Our store runs on WooCommerce.
Then your store is a WordPress site with payments attached, and it needs patching like one. That’s exactly what we do.
Does guest Wi-Fi need to be separate?
Yes. Anything that handles card payments should be on its own network, away from customer Wi-Fi.
Other businesses we look after
- Tax preparers & CPA firmsFTC Safeguards Rule
- Medical & dental practicesHIPAA Security Rule
- Contractors & home servicesWebsite leads and payment fraud
- Manufacturers & distributorsRansomware and supplier requirements
- Restaurants & cafésPCI DSS for card payments
- Consultants & agenciesClient security questionnaires
- Salons, spas & gymsBooking and payment data
- Auto dealers & repair shopsFTC Safeguards Rule for dealers
- Nonprofits, schools & childcareDonor, family and student data
- Real estateWire fraud at closing
- Law firmsDuty of client confidentiality
- Financial & insurance officesFTC Safeguards Rule and state insurance laws