Feature · Security & compliance

Security as a default, not an after-thought.

SSL, hosting, daily backups and CDN — all on the Go live plan, no extras to tick. Full WCAG + ADA + GDPR cookie-consent compliance comes on Security plus when you need it. The boring stuff, on by default.

256-bitSSL on every published site

DailyAutomated off-site backups

WCAG AACompliance on Security plus

The shape of the problem

Most builders sell the basics as separate line items.

Free SSL was supposed to be a default a decade ago. Some builders still charge for hosting, backups, accessibility scans and GDPR cookie banners. Here's where Avago sits.

Approach 01 · Pay per feature

SSL: £5/mo. Backups: £8/mo. CDN: £12/mo. Hosting: £15/mo.

Every security feature is its own line on the upgrade page. Three years in, your 'free' builder costs more than the agency build you avoided.

What breaks · Bills creep, basics missing

Approach 02 · 'Enterprise plan'

Compliance hidden behind the £200/mo tier.

WCAG, GDPR, cookie consent, two-factor auth — only on the top plan. So small businesses ship sites that fail accessibility audits and get fined.

What breaks · Compliance for the few

Approach 03 ·

Two clear plans. No surprise line items.

Hosting, SSL, backups, CDN and analytics on Go live (£34.99/mo). Full WCAG + ADA + cookie-consent compliance on Security plus (£69.99/mo) for businesses that need it. That's it — no five-page add-on menu.

What you get · Two plans, both honest

What's included

The boring stuff, done properly.

Four security layers that are on by default — and one you can opt into when you need it.

01 · Transport security

HTTPS, end to end.

Free 256-bit SSL on every domain (custom or avago.site). HSTS preloaded, TLS 1.3, HTTP/3 on supported clients. Auto-renews silently 30 days before expiry.

Free SSL on custom domains
HSTS preloaded
TLS 1.3 + HTTP/3

02 · Backups

Daily off-site, point-in-time.

Every published site backed up daily to an independent off-site store. Restore any page to any day in the last 30 with one click. Full-site restore for emergencies.

30-day rolling backups
Per-page restore
Full-site rollback

03 · Compliance

GDPR, ADA, WCAG.

Cookie consent banner generated to your jurisdiction. WCAG-AA scan run weekly with a fix-list. ADA compliance pre-checked on every template. No separate 'compliance plan' required.

Auto-generated cookie banner
Weekly WCAG-AA scan
ADA pre-checked templates

04 · Account security

2FA, audit log, role-based access.

Two-factor authentication for every account. Per-user roles for shared sites (owner, editor, viewer). Audit log of every change with who/when/what.

TOTP + WebAuthn 2FA
Per-site role permissions
30-day audit log

How it works

What happens when you click 'publish'. Layer by layer.

Three things go live at the same time as your site. You don't see any of them — that's the point.

SSL provisioned in under 60 seconds.

We issue a free Let's Encrypt cert against your domain (custom or avago.site), wire it into our CDN, and force HTTPS on every request. Cert auto-renews 30 days before expiry — you never see an outage.

Backup snapshot taken.

Your published site is snapshotted to an off-site store as soon as it goes live, then again every 24 hours. Snapshots include content, media, settings and form submissions.

Compliance scan runs in the background.

WCAG-AA contrast, alt text, focus order and ARIA labels are all checked weekly. Cookie banner is generated based on your visitor geography and the third-party scripts on your site.

Live security status

Every site, real-time health.

A live dashboard of SSL status, backup state, WCAG score, last security scan and any open compliance items. The kind of thing that ought to be available everywhere and somehow usually isn't.

SSL liveLast backup 4h agoWCAG-AA · 98%GDPR · ok0 alerts

FAQ · 6 short answers

The questions we get about security. Most weeks.

Do I have to pay extra for SSL?

No. Every published Avago site gets a 256-bit SSL certificate at no extra charge, auto-renewed before expiry. Works with custom domains and the default avago.site subdomain.

Are backups really included?

Yes. Daily backups for the last 30 days are included on the Go live plan and above. Restore any page to any day in two clicks. Annual plans include a 90-day window.

What's the difference between Go live and Security plus?

Go live (£34.99/mo) covers hosting, SSL, custom domain, CDN, daily backups and analytics. Security plus (£69.99/mo) adds the full WCAG + ADA accessibility compliance pack and the GDPR / ePrivacy cookie-consent banner generator. Pick Security plus if you're regulated or if accessibility audits matter to your industry.

Is Avago GDPR compliant?

The underlying platform is — EU visitor data is processed in EU data centres and a signed DPA is available on request. The Security plus plan adds the automatic cookie-consent banner generator. On Go live, you can drop in any third-party banner if you need one before upgrading.

What about accessibility / WCAG?

Every Avago template ships WCAG-AA compliant by design. The weekly automated WCAG-AA scan + fix-list dashboard is part of Security plus.

Can I share my site with a team safely?

Yes — on every plan. Three role levels (owner, editor, viewer), two-factor auth (TOTP or hardware key), and a full audit log of who changed what, when.