FultonStudio Service
Website & Email Security
We secure the two places customers reach you: your website and your business email. That means locking down logins, stopping form spam, setting up the email records that keep people from impersonating you, and making sure you can recover if something goes wrong.
Why This Matters
Your website and your email run on the same domain.
Most businesses treat the website and the email as separate problems, handled by different people, if anyone. But they share the same domain and the same DNS settings, and a weakness in one usually reaches the other. If someone can log into a forgotten admin account, or send an invoice that looks like it came from your address, the damage lands in the same place: your name.
When we review a business’s setup, we almost always find at least one of these: a former employee who can still log in, a contact form getting dozens of junk submissions a day, no DMARC record, or backups that have never been restored. None of it looks urgent until the day it is.
What FultonStudio Looks At: The Website
The places a business site usually gets into trouble.
Logins & Admins
We review every admin account, remove the ones that should not be there, and set up two-step login for the ones that stay.
Forms & Spam
We add Cloudflare Turnstile or reCAPTCHA, hidden spam traps, and filtering so real inquiries reach you and bot submissions do not.
CMS & Plugins
We update the CMS, themes, and plugins, and remove anything unused. Old plugins are the most common way small business sites get broken into.
Open Doors
We turn off comments, pingbacks, and old pages the site no longer uses, so bots have fewer places to push on.
Backups
We check where your backups live and how often they run, then test a restore instead of assuming it works.
SSL & Cloudflare
We check HTTPS and security headers and set up Cloudflare firewall rules in front of the site.
What FultonStudio Looks At: Your Email
Business email that cannot be faked, and accounts that cannot be walked into.
Spoofing Protection
We set up SPF, DKIM, and DMARC so no one else can send mail as your domain. The same records help your real email stay out of spam folders.
Mailbox Accounts
In Google Workspace or Microsoft 365, we turn on two-step verification, review admin roles, close accounts for people who left, and check for hidden forwarding rules.
Domain Control
We confirm who controls your domain registrar, lock the domain, secure that login, and make sure your website form emails send through authenticated mail.
How It Works
Review, fix, and hand you the notes.
We start by reviewing your site, DNS, and email setup and telling you in plain English what we found. Then we make the changes: access cleanup, spam protection, updates, email authentication, backups, and Cloudflare. At the end you get a written summary of what changed, what to keep an eye on, and where your logins, backups, and records are managed.
If your site has been badly compromised, or you need formal compliance work like HIPAA or PCI, we will say so on the first call and point you to a specialist. If you want us to stay on it afterward, security rolls into Website Care. See security pricing.
What You Get
A website and inbox that are harder to abuse and easier to recover.
Two-step login setup
Form spam and bot protection
CMS, plugin, and theme updates
Tested backup and restore
Cloudflare, DNS, and SSL setup
SPF, DKIM, and DMARC records
Workspace or 365 account review
Written summary of changes
Good Fit For
A site and inbox nobody has checked in a while.
Good for businesses getting form spam, seeing update warnings, hearing from customers about strange emails sent in their name, or that simply do not know who still has access to the website and email.
FultonStudio secures business websites and business email together, because both run on the same domain. Website work covers admin access, two-step login, form spam protection, CMS and plugin updates, tested backups, HTTPS, security headers, and Cloudflare. Email work covers SPF, DKIM, and DMARC records, Google Workspace and Microsoft 365 account security, forwarding rule checks, domain registrar access, and authenticated delivery for website form emails.
Project Path
Start with a review, or tell us what is wrong.
If you are not sure where the problem is, start with a website audit. If you already know, send us the details and we will reply with a first read.
1. Review
I am not sure what is wrong.
Use this if your site is getting spammed, showing update warnings, or has not been checked in a while.
Start Website Audit2. Request
I know what is wrong.
Send your website and domain, what is happening, and any spam or suspicious emails you have received.
Request Security HelpFAQ
Frequently Asked Questions
Do you work with Google Workspace and Microsoft 365?
Yes. Most of our clients use one or the other, and we set up account security and email authentication for both.
What are SPF, DKIM, and DMARC, and do I need them?
They are DNS records that prove your email really comes from you. If you send business email from your own domain, you need them. They protect you from impersonation and help your messages reach inboxes instead of spam folders.
Someone is sending emails pretending to be us. Can you help?
Yes. This is usually fixed by setting up DMARC correctly and tightening the records around it. Send us a support request and include an example message if you have one.
Is this only for WordPress sites?
No. WordPress is the most common, but we also work on other CMS-driven and custom business sites. Email security works the same way no matter what your website is built on.
Can you guarantee we will never be hacked?
No one honestly can. What we can do is close the common openings, stop the spam, and make sure you can recover quickly if something happens.
Do you work on hacked sites?
We can review and stabilize some compromised business websites. Advanced malware cleanup, incident response, or forensic work goes to a specialized security provider, and we will tell you that up front.
Do you publish client security work?
No. We never publish client dashboards, spam logs, admin screenshots, or security reports. The images on this page are illustrations.
Are there costs besides your fee?
Sometimes. Most small businesses can use free plans from Cloudflare and similar services. If your site needs a paid plan, like Cloudflare Pro or off-site backup storage, we tell you what it costs and why before anything is set up, and the account stays in your name. Current starting prices are on the Pricing page.
Can this be added to Website Care?
Yes. A security review is often the first step before ongoing Website Care, which covers updates, backup checks, spam review, and support requests.