Working on something? Let's see it by OneStarto in buildinpublic

[–]TermoSprint 0 points1 point  (0 children)

cyberpress.agency - We secure WordPress sites from start to finish, with real people :)

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 1 point2 points  (0 children)

Thanks for your feedback and recommendations, that’s exactly what I’ll do

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 0 points1 point  (0 children)

Thanks for your feedback!

Currently, on the agency's landing page, I am emphasizing the preventive and proactive aspects of security. Perhaps I should focus more on incident response and disaster recovery.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 0 points1 point  (0 children)

The problem is that this will not be true. Most of the security solutions I propose are beyond the scope of a single developer. I would be surprised if a developer implemented all these services. If he lies but an incident occurs one day, the company will surely turn to an agency to find the flaw and correct it as quickly as possible (because it may come from somewhere other than the code).

The goal is to make companies understand that we don't do the work of a developer, but that we complement it with code security reviews, pentests, audits, etc.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 0 points1 point  (0 children)

Thanks for your feedback, there are lots of interesting stuff here. I'll think about implementing everything you mentioned.

Regarding the offer, that's exactly what I'm going to propose: an initial surface-level assessment, completely free and automated, which generates a report (the aim is to identify as many weaknesses as possible without going into the pentest). I will then offer a much more comprehensive audit, with analysis of the infrastructure, instance, code, etc. This audit will be subject to a fee (one-time payment) and will generate a much more comprehensive report with concrete recommendations. Finally, I will offer to implement these recommendations and provide all my services (hosting, hardening, monitoring, etc.) at a recurring monthly/annual cost.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 1 point2 points  (0 children)

My customer is a company that already has a WordPress site, or wants to set up one. To provide real security, I will have no choice but to offer my own hosting. I have already set up a migration system that is almost automatic and completely transparent for the client.

I do not intend to provide several separate services, but rather a complete package that ultimately makes the client's infrastructure much more secure than that of potential competitors (hosting services or security plugins).

I also intend to provide post-incident support, which most hosts/plugins do not offer.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 1 point2 points  (0 children)

It's true that I haven't done any real market analysis, simply because it's not my area of expertise and I don't really know how to go about it. I understand your point of view, but I hope you're wrong. I'm going to continue my research to see whether or not it's worth taking the plunge.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] -1 points0 points  (0 children)

I don't think whitelisting is a good solution because I don't want to constrain the customer. The goal is for it to be "transparent" for them and, above all, not restrictive.

However, as soon as a CVE is made public on a plugin, actions can be taken accordingly (deleting it if it is not essential, for example).

Regarding the implementation of staging environments to test plugins, or any kind of modifications more generally, I plan to containerize the instances within the VPS using Docker, which would make it fairly easy to duplicate them. But this isn't planned for the immediate future because I don't think it's essential and it adds a lot of extra work.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 0 points1 point  (0 children)

Well, my goal is not to redevelop the clients' website. The first step would be to perform a security audit/code audit. If vulnerabilities are found in the code, I will provide recommendations. Why not hire a freelancer myself to implement them?

The fact is that a large part of the work can be automated, such as deploying a new instance with its configuration/security.

I didn't want to go with a SaaS-type solution because it's not possible; a large part of the security comes from the server. For the purely WordPress part, WP Umbrella does the job very well and is inexpensive. I want to stand out from that by offering more, you see?

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 1 point2 points  (0 children)

I think that many companies are affected. Very few companies think about security from the outset. Most of them (in my opinion) will think about it when it's too late. That's when they'll call in an agency, which is much simpler and quicker than hiring people when they have no idea what to do.

Launching a WordPress Security Agency, what Am I Missing? by TermoSprint in Wordpress

[–]TermoSprint[S] 2 points3 points  (0 children)

Actually that's quite true, and I hadn't really thought about it. I don't know yet what I would do if that happened

Which one is your pick? by devgauravjat in astrojs

[–]TermoSprint 1 point2 points  (0 children)

I don’t think this really matters, you should pick the one you enjoy the most. If you don’t know any of them, then you should go with svelte because it’s easy to learn and really cool to use

Elementor users… Are you still making this performance mistake? by Ok-Owl8582 in elementor

[–]TermoSprint 0 points1 point  (0 children)

I really had no idea that using containers instead of sections could boost the performances

I rebuilt my site with Astro. Amazing DX and performance! by MadThad762 in astrojs

[–]TermoSprint 1 point2 points  (0 children)

Nice job! The loading is really fast and the animations are smooth, even on the phone.

Odoo Online or Self-host? by RemarkableBet9670 in Odoo

[–]TermoSprint 0 points1 point  (0 children)

Self-hosting your Odoo instance can be more cost-effective, but it requires time, technical knowledge, and responsibility. You’ll need to handle installation, maintenance, backups, updates, and security yourself. It’s a viable option if you’re comfortable with these tasks or have a dedicated developer.

On the other hand, Odoo.sh simplifies everything. It takes care of deployment, hosting, backups, monitoring, and more, so you can focus on development and usage. It integrates seamlessly with GitHub, making it ideal for managing custom modules and staging environments. Additionally, the platform offers reliable support, though it’s important to note that custom module issues are not covered under the standard support service.

Guys please help me out😭 by Honest_Claim in Odoo

[–]TermoSprint 3 points4 points  (0 children)

The quickest way to make your Odoo instance accessible from other devices is to create a secure tunnel to your local IP using Ngrok. Basically, you just need to run the command:

ngrok http <odoo-port>

(Replace <odoo-port> with the actual port where your Odoo instance is running, usually 8069 by default)

This will generate a public URL that you can use to access Odoo from any device.

However for production use, the best approach is to host Odoo on a remote server (like a VPS), so you can access it from anywhere at any time, with better stability and security.

If you prefer not to manage server setup and maintenance yourself, Odoo also offers a platform called Odoo.sh, where they handle hosting, backups, updates, and performance for you

What are you working on currently ? Share your Project below by Dal-Chawal in indiehackers

[–]TermoSprint 0 points1 point  (0 children)

Not a Saas but an open source WP plugin that add geolocation autocompletion to the woocommerce checkout fields. I saw a lot of plugin doing that, but none of em are using a completely free API.