Lock Down Your Website Like a Cybersecurity Expert
Learn how to encrypt traffic, block attacks, and remove malware.

Installing SSL Certificates

• Free Let’s Encrypt SSL:
  1. Go to Security > SSL/TLS.
  2. Select your domain and click Install Free Certificate.
  3. Enable Auto-Renewal.
• Uploading Custom SSL (e.g., DigiCert):
  1. Paste your certificate, private key, and CA bundle.
  2. Assign the certificate to your domain.

Configuring Firewalls

• NikolaHost Web Application Firewall (WAF):
  1. Navigate to Security > Firewall Rules.
  2. Block common threats:
     • SQL injection
     • Cross-site scripting (XSS)
  3. Whitelist trusted IPs (e.g., office network).

Malware Scanning & Removal

1. Run weekly scans via Security > Malware Scanner.
2. Quarantine infected files and review logs.
3. For advanced infections:
   • Restore from a clean backup (Tools > Backups).
   • Hire our Security Experts via the support ticket system.

Best Practices

• Force HTTPS redirects by editing .htaccess:

  RewriteEngine On  
  RewriteCond %{HTTPS} off  
  RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]  

• Use Two-Factor Authentication for your control panel login.

Remember: Security is a habit! Update passwords every 90 days and audit user permissions monthly.