127 Media | Hosting, Web, Cloud, Hardware
Solutions for Business
Mon, 12 Oct 2026 10:31:08 +0000
en-GB
hourly
1
UK Managed Hosting for Small and Medium Businesses: A Buyer’s Guide
/uk-managed-hosting-sme-buyers-guide/
Thu, 10 Sep 2026 14:55:26 +0000
/?p=7430
Choosing a hosting provider used to be a fairly simple decision: find something reliable, keep the price sensible, move on. That’s changed. Where your data lives, who owns the company hosting it, and how many other businesses share a server with you have all become genuine business risks, not just technical details. This guide is […]
The post UK Managed Hosting for Small and Medium Businesses: A Buyer’s Guide appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
Choosing a hosting provider used to be a fairly simple decision: find something reliable, keep the price sensible, move on. That’s changed.
Where your data lives, who owns the company hosting it, and how many other businesses share a server with you have all become genuine business risks, not just technical details.
This guide is written for small and medium-sized UK businesses, not enterprises with an in-house IT department negotiating colocation contracts. If you run a business where nobody’s job title is “IT,” and you need hosting to just work without becoming a project, this is for you.
It outlines what to check before you commit to a managed hosting provider, along with a few warning signs to take seriously if you spot them.
1. Who actually owns the provider, and whereServer location isn’t the whole story. Ownership determines which country’s laws apply to your data, and who can be compelled to hand it over.A UK-owned, UK-incorporated provider running UK data centres gives you the clearest position: your data is subject to UK law. Providers owned by an overseas parent company, even if your data physically sits in a UK data centre, can still fall under that parent country’s legal jurisdiction. This matters most if you handle client data, financial records, or anything covered by a compliance obligation.Ask directly: who owns the company, and where is it legally incorporated?
2. How many other websites are on your serverThis is one of the most overlooked factors in hosting quality, and one of the easiest to hide. Many budget providers keep prices low by placing thousands, sometimes hundreds of thousands, of websites on a single server.The problem isn’t just performance, though that’s real: too many sites competing for the same resources leads to slow load times and instability during traffic spikes. It’s also a security and reputation issue. A compromised site can become a stepping stone to attack others sharing the same server, and a shared mail server means one bad neighbour can get your legitimate emails flagged as spam.Ask directly: roughly how many websites share a server with mine?
3. What happens when you need to moveMigrating hosting providers is where many businesses get stuck, either because they fear downtime or because a provider makes leaving deliberately difficult. A provider confident in their service should make migration straightforward, ideally handling the technical work themselves with minimal disruption.Ask directly: Will they handle the migration for me, and what’s the expected downtime?
4. How backups actually work, not just whether they existAlmost every provider will tell you backups are included. Fewer will tell you how often they run, where they store them, or whether they’ve actually tested a restore recently. A backup that’s never been tested is a hope, not a safeguard.Ask directly: how often do backups run, where are they stored, and when was a restore last tested?
5. Whether support is proactive or purely reactiveSome providers wait for you to notice a problem and raise a ticket. Others monitor infrastructure continuously and catch issues before they become outages. The difference often shows up exactly when you need it most.This matters more, not less, if you don’t have your own IT person. A provider who only reacts once you’ve noticed a problem leaves you carrying the risk of noticing it first.Ask directly: is my server actively monitored, or does support only respond once something’s already gone wrong?
6. What security is actually built inFirewalls, malware scanning, and encrypted connections should be standard, not an upsell. Ask what’s included by default versus what costs extra, and whether security updates for the platform itself (WordPress core, plugins, and so on) are part of the service or left to you.
Red flags worth taking seriouslyVague or evasive answers about server density or company ownershipNo clear migration process, or reluctance to discuss itBackups mentioned only in passing, with no detail on testing or storagePricing that seems unusually low compared to the rest of the market, with no explanation of what’s different
Where this leaves youNone of this means the cheapest option is automatically wrong, but it does mean price alone isn’t a safe way to compare providers. A clear answer to each of the questions above tells you far more about what you’re actually buying than a features list does, and it matters more when you don’t have the internal expertise to spot problems yourself.If you want to see how we answer these questions ourselves, our approach to data sovereignty and managed hosting goes into more detail, and our UK sovereign managed hosting for SMEs service covers what’s included as standard. We work specifically with SMEs, so if any of this feels like it’s describing a headache you’d rather not own, that’s exactly the conversation we’re happy to have.
The post UK Managed Hosting for Small and Medium Businesses: A Buyer’s Guide appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
3 Things That Quietly Kill Your Website And How to Stop Them
/website-maintenance-checklist/
Wed, 29 Jul 2026 15:33:05 +0000
/?p=7036
Many business owners only think about their website twice: the day it launches, and the day something goes wrong. In between, it just sits there, working away in the background. Or so it seems. The truth is, a website isn’t a one-off purchase. It’s more like a company vehicle. Skip the servicing for long enough, […]
The post 3 Things That Quietly Kill Your Website And How to Stop Them appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
Many business owners only think about their website twice: the day it launches, and the day something goes wrong. In between, it just sits there, working away in the background. Or so it seems.
The truth is, a website isn’t a one-off purchase. It’s more like a company vehicle. Skip the servicing for long enough, and it won’t matter how good it looked on the forecourt. It’ll let you down, usually at the worst possible moment.
Your website maintenance checklist
Here are the three things we see wreck websites time and again, and what to do about each.
1. Outdated softwareIf your site runs on WordPress (and most business sites do), it’s built from layers: the core software, a theme, and a stack of plugins that add functionality like contact forms, galleries, or booking systems.Every one of those layers gets updated regularly. Sometimes for new features, but often to patch security holes that have just been discovered. Skip those updates and your site doesn’t stay still. It falls further behind with each passing week.The knock-on effects build up quietly:Plugins stop working together. An outdated plugin and a newer one can start clashing, breaking pages or features with no obvious cause.Compatibility gaps widen. The longer you wait, the bigger the jump the next time you update, which increases the chance something breaks.Support disappears. Old software eventually stops getting fixes altogether, leaving known problems unpatched for good. None of this shows up as a dramatic crash. It shows up as a site that gets slower, glitchier, and harder to trust, until one day it just stops working properly and nobody’s sure why.The fix: This is the first line of any website maintenance checklist: updates need to happen regularly, and ideally on a schedule rather than “whenever someone remembers.” Just as important is testing after each update. Applying an update blind, without checking the site still works afterwards, is how a lot of these breakages happen in the first place.
2. Security neglect, with no safety net underneath itHere’s a myth worth killing off: “we’re too small to be a target.” Automated attacks don’t care how big you are. They scan the web looking for outdated software, weak logins, and unpatched vulnerabilities, and they do it at a scale no human attacker ever could. The National Cyber Security Centre publishes regular guidance on the kinds of automated threats small businesses face, and it’s worth a look even if you’re not technical.”When a site gets compromised, it’s rarely obvious straight away. More often it’s quiet and slow:Malicious code gets injected, sometimes redirecting visitors or serving hidden spam links.Search engines notice before you do, and start flagging or de-ranking the site.Customer trust takes a hit if visitors see warnings or, worse, if their own data is exposed. This is where backups matter, because no security setup is watertight. Even with good defences in place, things still go wrong: a botched update, a hosting failure, a hack that slips through, or simple human error. When that happens, a solid, recent, tested backup is the difference between being back online in minutes and losing months, sometimes years, of content and customer data for good.The trap most businesses fall into isn’t having no backup at all. It’s assuming a backup exists because it’s “set up somewhere,” without ever checking it actually runs and actually restores. A backup you’ve never tested is a guess, not a safety net, and it turns a recoverable incident into a genuine disaster.The fix: This is the second item on your website maintenance checklist: treat security and backups as two halves of the same job. Security includes keeping software current (see point one), using a proper firewall and malware scanning, enforcing strong login credentials, and having someone actually watching for warning signs. Backups should run automatically, be stored separately from the live site, and be tested periodically to confirm they restore a working copy. If nobody can tell you when the last successful backup ran, that’s worth checking today, not after something’s gone wrong.
3. Neglected contentThis one’s easy to miss because it doesn’t break anything. The site still loads, the forms still work, nothing looks obviously wrong. But a website full of old prices, discontinued services, last year’s team photos, or a blog that stopped three years ago sends a quiet signal to every visitor: nobody’s home.Stale content costs you in two ways at once:Visitors lose confidence. An out-of-date site makes people wonder what else might be out of date, like your prices, your stock, or whether you’re even still trading.Search engines lose interest. Search engines favour sites that show signs of life. A site that hasn’t been touched in years typically loses ground to competitors that publish and update regularly, even if the underlying product or service is just as good.Content decay is slower than a hack and less dramatic than a broken plugin, which is exactly why it does so much damage. Nobody notices the leak until the business has quietly been losing enquiries for months.The fix: The third item on your website maintenance checklist is content: it needs the same regular attention as the software underneath it. That means reviewing key pages for accuracy, refreshing anything that’s gone stale, and publishing new content often enough to show both visitors and search engines that the site is actively looked after.
The pattern behind all threeNone of these problems announce themselves. A website doesn’t send a warning email before it gets hacked, and a stale blog doesn’t flash a light before it starts costing you enquiries. That’s exactly why they’re so easy to ignore, and exactly why they cause so much damage when they’re ignored for too long.The businesses that avoid these problems aren’t the ones with the biggest budgets. They’re the ones treating their website as something that needs ongoing care, not a project that finished the day it went live.
Keeping your website cared forThis is the exact gap a proper website maintenance checklist is built to close: regular software updates, security monitoring, tested backups, and regular content updates, all handled in the background so you don’t have to remember. If you’re not sure when your site was last updated, backed up, checked, or refreshed with new content, that’s a good sign it’s time for a conversation.Get in touch with the team at 127 Media, and we’ll take a look.
The post 3 Things That Quietly Kill Your Website And How to Stop Them appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
Microsoft 365 Backup: Why Retention Policies Aren’t Enough
/microsoft-365-backup-retention-policies/
Thu, 25 Jun 2026 12:09:13 +0000
/?p=6998
Microsoft 365 backup isn’t as straightforward as most people think. A client called me in a panic recently. Someone on their team had deleted a shared folder in SharePoint. Important documents, gone. They assumed Microsoft would sort it, because surely their data was backed up in the cloud? It wasn’t. Not in the way they […]
The post Microsoft 365 Backup: Why Retention Policies Aren’t Enough appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
Microsoft 365 backup isn’t as straightforward as most people think.
A client called me in a panic recently. Someone on their team had deleted a shared folder in SharePoint. Important documents, gone. They assumed Microsoft would sort it, because surely their data was backed up in the cloud?It wasn’t. Not in the way they thought.After a lot of digging, we recovered most of what they’d lost, but it was a close call. And they’re not alone. It’s one of the most common misconceptions I come across: that using Microsoft 365 automatically protects your data.It isn’t. Here’s why, and what to do about it.
What Microsoft 365 actually gives youMicrosoft does include some built-in data tools with every 365 subscription. There’s the Recycle Bin for deleted files, version history in SharePoint and OneDrive, and retention policies you can set up in the Compliance Centre. For Exchange, there’s litigation hold and a degree of mailbox-level recovery.These are useful. But they’re not a backup. Microsoft builds them for operational continuity and compliance, not for recovering your data after something goes wrong.There’s a meaningful difference, and it matters.
What retention policies actually doA retention policy tells Microsoft how long to keep a piece of data before it’s deleted, or how long to hold on to it even if someone tries to delete it early. That’s it.It won’t reliably let you roll back your environment or data set to a clean point in time across the business. It won’t recover a mailbox that was deleted after a member of staff left. It won’t restore a SharePoint site that was wiped out by ransomware. And it certainly won’t give you a clean, point-in-time snapshot of your data from before an incident happened.Think of a retention policy like a legal filing cabinet. It keeps records for the right amount of time and stops people from throwing things away too early. That has its place. But if the office floods, the filing cabinet doesn’t save you.
The gaps that catch businesses outHere are the situations where Microsoft 365’s built-in tools regularly fall short for small and medium businesses:Accidental deletion with a long tail. Microsoft’s Recycle Bin holds deleted items for 30 to 93 days depending on the workload. If no one notices a file is missing until three months later, it’s gone.Staff leaving the business. When you remove a Microsoft 365 licence, the associated data is at risk. Without proper backup, mailboxes and OneDrive content can be deleted automatically once the licence is gone.Ransomware. If ransomware encrypts your SharePoint files or OneDrive content, the encrypted versions can sync across and overwrite your version history. Retention policies won’t protect you here.Shared mailboxes and Teams data. These are easy to overlook in a retention policy setup, and often aren’t configured at all in smaller businesses.Misconfigured policies. Retention policies require careful setup. A policy that’s set up incorrectly can either delete data too soon or create a false sense of security.
Why Microsoft 365 backup needs a dedicated solutionMicrosoft itself is clear that it operates on a shared responsibility model. Microsoft keeps the platform running. Protecting what’s in it is your responsibility.A proper Microsoft 365 backup solution runs independently of the platform. It takes regular, scheduled snapshots of your data across email, OneDrive, SharePoint, and Teams. It stores those copies separately. And it lets you restore individual items, full mailboxes, or entire sites to a specific point in time, quickly and cleanly.That’s a fundamentally different proposition to a retention policy.
Why we use AvePoint for Microsoft 365 backupAt 127 Media, we use AvePoint Cloud Backup ourselves and manage it for our clients, too. If we’re trusting it to protect our own business data, you can be confident we’d only recommend it to you for the same reason. Here’s what makes it the right choice for UK SMBs:Everything is covered. AvePoint backs up Exchange mailboxes, OneDrive, SharePoint, Microsoft Teams (including chat history and Planner tasks), Microsoft 365 Groups, and more. Nothing slips through.Granular restore, not all or nothing. You can restore a single email, a specific file, a calendar appointment, or an entire SharePoint site. You choose the point in time. AvePoint doesn’t force you to roll back everything just to recover one item.Backups run up to four times a day. Even in a worst-case scenario, you’re unlikely to lose more than a few hours of work.Ransomware protection built in. AvePoint monitors daily change rates across your backed-up data and flags unusual activity early. If you do get hit, you can restore to a clean point before the attack took hold.Data stays in the right place. Backup data can be stored in UK-based storage, which matters for businesses with GDPR considerations or data sovereignty requirements.Proof you can show. Every backup job produces a report. If you’re ever asked by a client, a regulator, or an auditor whether your data is protected, you can show the evidence.
What would happen to your business data today?If someone deleted your most important SharePoint folder right now, how quickly could you get it back? What if a member of staff left suddenly and you needed to access their emails six months later? What if ransomware encrypted your Teams files overnight?If you’re not confident in the answers, it’s worth taking a look at how your Microsoft 365 data is actually protected.We can review your current setup, identify any gaps, and walk you through what a proper Microsoft 365 backup looks like in practice. There’s no commitment, and it won’t take long.Get in touch.
The post Microsoft 365 Backup: Why Retention Policies Aren’t Enough appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
WordPress Website Security: Daily Attack Attempts Explained
/wordpress-website-security-daily-attacks/
Tue, 16 Jun 2026 09:38:41 +0000
/?p=6947
What Daily Monitoring Data Reveals About WordPress Website Security Every day, we monitor the security of the WordPress websites in our care. The picture is always the same: constant, automated attack activity, regardless of business size or industry. This isn’t a one-off incident. It’s the everyday reality of running a website in 2026, and the […]
The post WordPress Website Security: Daily Attack Attempts Explained appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
What Daily Monitoring Data Reveals About WordPress Website Security
Every day, we monitor the security of the WordPress websites in our care. The picture is always the same: constant, automated attack activity, regardless of business size or industry.This isn’t a one-off incident. It’s the everyday reality of running a website in 2026, and the volume keeps growing.
What We See Every DayAcross the sites we manage, common activity includes:Hundreds to thousands of automated login attempts, repeated targeting of genuine user accounts, continuous probing of default usernames like “admin,” attack traffic arriving from several countries at once, and account lockouts triggered by repeated failed logins.This is simply the background noise of the modern internet.
Real Examples From Live SitesOn one monitored site, a genuine user account received over 600 login attempts, while the “admin” username was targeted more than 200 times.On another, known email addresses were tested repeatedly, alongside generic accounts such as “root” and “superadmin.”These aren’t random guesses. They’re automated systems systematically working through likely entry points.Where the Attacks Come FromAttack traffic regularly originates from multiple regions simultaneously, including, but not limited to, India, the United States, Brazil, Pakistan, Iran, Japan, and Eastern Europe. This pattern reflects large-scale bot networks, not individuals manually targeting your business.Brute Force Attempts and Account LockoutsWe also see regular lockouts caused by repeated failed logins. A typical pattern looks like this: 20 failed attempts against a single account, an automatic lockout response, and source traffic originating from outside the UK.This is brute force activity happening in real time, every day.
“We’re Too Small to Be Targeted” Is a Myth
It’s a common assumption among small and medium businesses, but modern attacks don’t work that way. They’re automated, wide-reaching, and opportunistic.
Attack systems scan thousands of websites looking for weaknesses, not importance. A small business website is just as likely to be probed as a large corporate one.
Read our guide on how your business can improve cyber security.
What a Breach Actually Costs Your Business
A compromised website rarely stays “just a website problem.”
Loss of trust: Visitors redirected to malicious content, browsers flagging your site as unsafe, and lasting reputation damage.
Business disruption: Downtime, lost enquiries and sales, and potential email issues if your server is abused for spam.
Data risk: Exposed contact form submissions, accessed customer information, and possible GDPR implications.
Long-term impact: Blacklisting by Google or email providers, recovery and clean-up costs, and significant lost time for the business owner.
Read more about why proactive website maintenance is your digital insurance.
The Real Cause of Most Breaches
Most breaches don’t happen because a business was specifically targeted. They happen because a vulnerability existed, an automated system found it, and nothing stopped it.
How 127 Media Protects Your Website
Our approach to WordPress website security includes monitoring of security activity, proactive updates across all systems, web application firewall protection, secure login configuration, and low-density hosting environments.
Find out more about our web hosting services.
The Bottom Line
The internet isn’t quiet. It’s constant, automated, and the volume is increasing.
The real question isn’t whether your website is being attacked. It’s whether it’s protected.Have a question? Visit our FAQs page.
Want to know how secure your website really is? Get in touch for a no-obligation security review.
The post WordPress Website Security: Daily Attack Attempts Explained appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>
Data Sovereignty: Why UK Businesses Can No Longer Ignore It
/data-sovereignty-and-managed-hosting/
Tue, 10 Mar 2026 16:13:51 +0000
/?p=5919
Data sovereignty has rapidly become an important consideration in managed hosting for UK businesses. Once viewed as a technical detail best left to IT providers, it is now firmly a commercial, legal, and reputational issue. Data sovereignty refers to the principle that data is governed by the laws of the country in which it is […]
The post Data Sovereignty: Why UK Businesses Can No Longer Ignore It appeared first on 127 Media | Hosting, Web, Cloud, Hardware.
]]>