The verdict in three sentences
With roughly 30,000 websites hacked every day worldwide, the question is not whether you are targeted, but whether you will be ready. The minimal foundation comes down to four moves: HTTPS, daily backup, regular CMS updates and an application firewall. For 30,000 to 80,000 FCFA of maintenance a month, you turn a potential disaster into a simple restore of under 2 hours.
Neglected site vs maintained site: what changes under attack
The difference is invisible day to day. It erupts the day something goes wrong.
| Situation | Neglected site | Maintained site |
|---|---|---|
| HTTPS (padlock) | Absent or expired | Active, auto-renewed |
| Last backup | Unknown / none | Under 24 h |
| CMS updates | Never | Monthly |
| Application firewall (WAF) | No | Yes |
| Restore time after a hack | Days, or never | < 2 hours |
| Average cost of an incident | Possible total loss | A few tens of thousands FCFA |
An un-updated CMS (WordPress and its plugins first) is the number-one entry point: known flaws are exploited automatically by bots, without anyone targeting you personally.
The minimal security foundation and its 2026 cost
Four areas cover the vast majority of an SME's risks.
| Measure | Role | Frequency | 2026 cost benchmark |
|---|---|---|---|
| HTTPS / SSL | Encrypt + trust + SEO | Continuous, auto-renewed | Free (Let's Encrypt) |
| Automatic backup | Ability to restore everything | Daily | Included in maintenance |
| CMS/plugin updates | Close known flaws | Monthly | Included in maintenance |
| Application firewall (WAF) | Block common attacks | Continuous | Included in maintenance |
| Overall maintenance plan | All managed for you | Monthly | 30,000-80,000 FCFA/mo |
HTTPS is at once a security requirement, a trust signal (the padlock) and a Google ranking factor: it is free, never go without it. Monthly maintenance bundles the rest: backups, updates, monitoring, for a controlled budget of 30,000 to 80,000 FCFA depending on site size.
Mini case study
Aminata runs a booking site for her beauty salon in Dakar, on WordPress. For eight months, no updates, no known backup. A bot exploits a flaw in an outdated plugin and injects redirects to a shady site: Google downranks the site, clients land on a suspicious page. With no backup, recovery takes five days and costs a partial rebuild. After the incident, she subscribes to maintenance at 50,000 FCFA a month: daily backup, monthly updates, firewall. Six months later, a new attempt is blocked by the firewall and, even had it gotten through, restoration would have taken under 2 hours. That is 600,000 FCFA a year to never relive the five days of panic.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
FAQ
Is my small business really a target?
Yes, but rarely personally. With 30,000 sites hacked a day, most attacks are automated: bots scan the web for known flaws. A small unmaintained site is easier prey than a large monitored one.
Is HTTPS enough to protect me?
No. HTTPS encrypts the connection and reassures the visitor, but it does not protect against a holed CMS or a vulnerable plugin. It must be combined with backups, updates and an application firewall.
How often should I back up?
Daily for a site that changes (orders, bookings, blog). The goal is never to lose more than 24 h of data and to be able to restore in under 2 hours. Backups must be stored off the site's own server.
How much does serious maintenance cost?
As a 2026 order of magnitude, 30,000 to 80,000 FCFA a month depending on the site's size and criticality. That is small against the cost of a hack: data loss, Google downranking and days of downtime mid-activity.
What if my site is already hacked?
Take the site offline, restore the last clean backup, update all components and change passwords. Without a backup, rebuilding is long and costly, which is exactly why a preventive plan matters.
Let's talk about your project. We audit your site's security hygiene and set up the backup + updates + firewall foundation. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
