24/7 website security with CyberEX
Bots are already scanning your website today. They hunt for outdated plugins, weak passwords and forgotten files. Without security monitoring, you usually learn about a hack from a customer or a Google warning, when sales are already suffering.
EvoEX CyberEX is our security center. It monitors client websites around the clock, stops automated attacks on its own and spots vulnerabilities in time. If something serious happens, our team immediately receives an action plan. Free for EvoEX projects, € 30 per month for other websites.
Free for clients · € 30/month for others
WHAT HAPPENS AFTER A HACK
A hack costs more than the IT bill. It costs you customers.
Many business owners think nobody is interested in their website. Bots don’t care who owns it. They only check whether the door is open.
Google warns your customers
A red “Dangerous site” screen appears before your page. Visitors leave before they even see your offer.
You vanish from search
Search engines can demote infected pages or remove them from results. SEO built up over years collapses in a few days.
Emails land in spam
Hacked websites often send spam. Your domain ends up on blacklists, and your invoices and proposals no longer reach your customers.
Customer data falls into the wrong hands
Forms, orders, contacts. The GDPR requires data breaches to be reported within 72 hours, and fines can reach 4% of annual turnover.
Sales grind to a halt
While the site is being cleaned and restored, it doesn’t work. Your ad budget goes to waste, and cleaning up after the fact costs more than prevention.
Nobody notices
Without monitoring, a hack is often spotted by a customer or Google, not by you. Until then, an attacker can make themselves at home on your site for weeks.
WHO IT’S FOR
Security for WordPress and other platforms. Who CyberEX is for
WHO IT’S DESIGNED FOR
Small and medium-sized businesses without an in-house security specialist, who can’t afford a week without a working website.
A WordPress site on EvoEX servers. The most complete protection: Shield, server sensors and security fixes the moment they are released.
A WordPress site on other hosting. The EvoEX Shield plugin.
Another platform (Next.js, Node.js, PHP, Laravel). The universal version of EvoEX Shield.
WHY YOU NEED IT
- Attacks are automated. Bots scan the internet every day, and the size of your site doesn’t matter.
- An outdated plugin or a weak password is the first thing bots look for.
- A breach is often noticed too late, when your reputation and sales have already suffered.
- An ordinary security plugin protects a single site and learns only from its own experience.
- Your site handles customer data, and your business is responsible for keeping it safe.
HOW IT WORKS
24/7 website monitoring with five layers of protection
01
Protection on your site
EvoEX Shield stops attacks on the spot: a firewall (WAF), a scanner guard, login protection, bot traps and file integrity checks.
02
One security center
CyberEX receives signals from all protected sites and server sensors, and spots vulnerabilities in time.
03
Sites protect each other
The blocked IP list is shared. An attacker who tries to break into one site is stopped at the door by all the others.
04
A human hears about serious issues
A serious event becomes an incident. Our team receives a task with a deadline and action steps, not just an email.
05
You see everything
A security overview in your EvoEX portal and a report every month.
SERVER SENSORS
Sensors that see what no plugin can
On EvoEX servers, CyberEX protects not only the website itself but also the server beneath it. Sensors watch what happens behind the scenes and react in seconds, not days. If a sensor goes silent, we know about it.
New files in site folders
The sensor checks every new or modified PHP file and compares it against the official WordPress and plugin checksums. This is how we find hidden backdoors that a routine scan misses.
Suspicious processes
If a website suddenly launches a command line, changes scheduled tasks or starts communicating with an unknown server, the sensor spots it immediately.
Attacks on PHP itself
The sensor links PHP crashes and memory errors to the requests that caused them. This exposes attempts to exploit vulnerabilities in PHP itself, not just in the website.
Security patches without the wait
The sensor knows which PHP versions are vulnerable and alerts us as soon as a fix is released. We install it with backups and checks, usually within a few minutes.
Automatic isolation
If the sensor finds signs of a serious breach, the site is temporarily shut down with a clear notice for visitors. The attacker loses access, you receive an email, and we are already working on it.
Server access control
Every server login, system file change and permission change is logged and checked. Server management is available only through a private, encrypted network.
FROM PRACTICE
A critical PHP vulnerability. Not a single site was taken offline.
In October 2026, the PHP developers announced a critical vulnerability that allowed an attacker to execute code on a server without a password. It affected all supported PHP versions.
- That very first evening, we checked all sites. No signs of compromise were found.
- The same evening, we put temporary protection in place and added this attack’s signatures to our sensors.
- Clients heard about the situation from us, not from the news.
- As soon as the fixes were released, we installed them within minutes, the last one at 02:38 at night.
- No client site was taken offline, and clients didn’t have to do anything.
This is what CyberEX looks like day to day: we act before you even hear about the problem.
What you get
- A shared blocked IP list across all EvoEX websites
- A firewall (WAF) against the most common hacking attempts, plus a scanner guard that recognizes and blocks sqlmap, WPScan, Nuclei and Nikto
- Login protection, including against password guessing from many addresses
- Fake bot detection and bot traps. We never block genuine search engines, so your SEO doesn’t suffer.
- Alerts about vulnerabilities in your website’s plugins
- A daily file integrity check that spots suspicious changes
- Server sensors that watch for new files, processes and connections (for websites on EvoEX servers)
- Automatic website isolation if serious signs of a breach are found
- PHP and server security patches as soon as they are released
- A login page with your logo and EvoEX support contacts
- A security section in your portal and a monthly report
- Automatic, safe updates. You don’t have to do a thing.
What’s included
- Installation and setup
- EvoEX Shield protection on your website
- Connection to the CyberEX security center
- Server sensors and security patches (on EvoEX servers)
- Incident response plan with deadlines
- Security section in the EvoEX portal
- Monthly security report
TECHNOLOGIES
DATA SECURITY
Your data stays in the European Union
- Our servers are located in the European Union: in Finland, with partners in Germany and Finland. We process data in compliance with GDPR requirements.
- We never send usernames, passwords or form contents from your website. Only what is needed to recognize an attack.
- Every new version goes through a security check and automated tests before release.
FREQUENTLY ASKED QUESTIONS
Website security questions
Does it slow down my website?
No. Checks run on the website itself, and lists update in the background. If the security center is briefly unreachable, your website keeps running.
Could my customers get blocked?
Initial blocks are short. An address only makes it onto the shared list when several sources confirm it. We never block logged-in administrators.
Does it replace backups and updates?
No, it complements them. Backups and updates are still necessary.
What happens if my website gets hacked anyway?
The sensor isolates the website automatically: visitors see a notice, the attacker loses access, and you receive an email. Our team finds the cause and helps you clean up and restore the website.
Do I need to do anything?
No. We install, configure and maintain it.
How much does CyberEX cost?
If your project is built with EvoEX, it’s free. For other websites, a CyberEX subscription is € 30 per month. The one-time setup for a WordPress website with our plugin costs € 100, and for other (non-WordPress) websites € 200. The first month’s payment is already included.
RESULT
We find out about a serious incident, not your customers
An attacker who hits one EvoEX website gets stopped on all the others. You can sleep soundly while CyberEX guards your website.