Blog
Major Upgrades to Watchful’s Vulnerability Scanner
Watchful’s vulnerability scanner gets a major upgrade with new malware and reputation checks, CVE detection, automated scanning, and intelligent security notifications.
News
We’re retiring the SEO Audit in favor of Google Lighthouse
We’re retiring Watchful’s original SEO Audit in favor of Google Lighthouse. Discover how automated weekly scans, detailed SEO reports, performance monitoring, and historical insights help you keep your websites in top shape.
Blog
How to add a basic Content Security Policy (CSP) header
Content Security Policy, usually abbreviated as CSP, is an HTTP response header that allows a website to tell browsers which sources and behaviors should be permitted when displaying its pages. A complete CSP can control many different aspects of a website. However, you do not need to implement a complicated Read more
Blog
How to enable HTTP Strict Transport Security (HSTS)
HTTP Strict Transport Security, usually abbreviated as HSTS, is a security header that tells web browsers to access your website using HTTPS only. Once a browser receives an HSTS header from your website, future attempts to visit the site over HTTP are automatically upgraded to HTTPS. The browser will also Read more
Blog
How to add the X-Frame-Options header to your website
The X-Frame-Options HTTP response header helps control whether pages from your website can be displayed inside a frame or iframe on another website. If this header is missing, another site may be able to embed your pages inside its own content. This can increase the risk of clickjacking, where a Read more
Blog
How to remove the PHP version from WordPress HTTP headers
PHP is the programming language that powers WordPress. Depending on your server configuration, the exact version of PHP running your website may be included in its HTTP response headers. For example, your server might return: X-Powered-By: PHP/8.2.33 Visitors do not normally see HTTP response headers when browsing your website, but Read more
Blog
Watchful introduces smarter uptime monitoring with Boost Mode
Watchful introduces smarter uptime monitoring with customizable check intervals, automatic Boost Mode, and improved outage tracking for WordPress and Joomla! websites.
Blog
What to do if your WordPress or Joomla site has been hacked
Learn how to investigate a suspected hacked WordPress or Joomla! website, identify malicious changes, remove malware, and secure your site against future attacks.
Blog
Lighthouse Performance Drop Alerts Now Available to All Premium Users
Watchful Premium users can now receive optional email alerts when Lighthouse detects a significant website performance decline of 25% or more.
Blog
How to allowlist IP addresses
Firewalls sometimes block legitimate services and trusted visitors. Learn how to allowlist IP addresses in Cloudflare, hosting firewalls, and WordPress or Joomla! security tools without unnecessarily weakening your website’s protection.