We handle the security

Why pay extra to stay safe? We include advanced security with every hosting plan — no hidden fees, no upsells.

We don’t just host your website — we protect it. Every site we host is immediately locked down with a powerful, multi-layered security system. These protections are in place not only to safeguard your site, but to defend our servers and every other site we host. Security isn’t an afterthought — it’s built into everything we do.

🔐 Web-Based Firewall

Every site gets a dedicated firewall installed and configured at the site level. This is your first line of defense against bad actors. It automatically blocks:

• Brute-force login attempts

• SQL injection attacks

• Cross-site scripting (XSS)

• Spam bots and scrapers

• Known malicious IPs

It also performs routine full-site scans, checking for suspicious files, unauthorized changes, and unsafe links. If anything sketchy shows up, we’ll know about it.

🛡️ Fail2Ban + CrowdSec

These two systems watch for repeat offenders. When an IP tries something shady — like hammering login pages or probing for weaknesses — Fail2Ban blocks them at the server level. Then CrowdSec steps in to:

• Share that malicious IP with a global database

• Prevent the same IP from bothering other Lost Swordfish customers

• Help protect the wider internet by reporting threats to cybersecurity networks

Together, they make sure attackers don’t get a second chance.

🔒 Strong Passwords & MFA

Weak passwords are an open door. We enforce strong password policies by default to lock that door tight. If you want even more protection, we can enable Multi-Factor Authentication (MFA) for your login pages — adding an extra step that bots and attackers can’t bypass.

🧠 Cloudflare Turnstile

Whenever possible, we integrate Cloudflare Turnstile, a privacy-friendly reCAPTCHA alternative, to guard login forms, comment sections, and contact forms. This helps block non-human users, like spambots and malicious login attempts, without annoying your real visitors.

Why This Matters

Most website owners don’t realize how many attacks happen in the background every day. Even small, low-traffic sites are constantly hit by automated bots looking for weaknesses. We stop those threats before they cause damage — so you can focus on your site, not on fighting off attackers.

By securing your site, we also help protect everyone else on the server. One weak link can put others at risk — that’s why security is a shared responsibility, and we take our part seriously.