# Hedgehog (hedgehog.site)

> Hedgehog moves small business websites onto fast, secure static hosting with no plugins, no database and no login to hack, then makes changes whenever the owner sends a voice note, text or email. Your site, without the headache.

## Key facts
- What it is: a done-for-you website move plus secure static hosting and changes by voice note, text or email. Every change comes back as a preview and goes live only when the owner confirms it with a one-time code.
- Who it's for: small service businesses whose website is an online brochure, such as trades (plumbers, electricians, builders), physios and clinics, hair and beauty salons, cleaners, landscapers and other home services. Owners who are not technical.
- What it replaces: WordPress, Wix, Squarespace, Weebly and other website builders or CMS sites. Hedgehog starts from the live website, so the platform doesn't matter.
- Why it's safer: the site no longer has a login page, plugins, a theme to update, server software to patch or a database, which are the parts automated hacking robots break into. Hedgehog does not promise a site can never be hacked; the main remaining risk is the owner's domain and email accounts, and Hedgehog helps secure those.
- Price (USD): one payment of $199 covers the move and the whole first year. From month 13: $18 a month billed yearly ($216), or $25 a month billed monthly. Free preview before paying.
- Included: Your current site moved across; Fast, secure hosting; The padlock (HTTPS), kept renewed; Old page links kept working; Contact forms to your inbox; Daily backups and uptime checks; Changes by voice note, text or email; Help securing your domain.
- How it works: (1) Tell us your web address: Plus your email, so we can send you the preview. (2) We rebuild it: Your words, photos, prices and contact details come across, and it looks the way it does now. Old page links keep working, so Google doesn't lose track of you. (3) You have a look: Click through the private preview on your phone. Ask for anything to be changed before it goes live. (4) We switch it on: We point your web address at the new site and add the padlock. Then you can cancel the old hosting and renewals.
- Leaving: the site is standard web files any host can run, and the owner can ask for them at any time.
- Markets: United States, United Kingdom, Canada, Australia, New Zealand and Singapore.
- Company: Hedgehog Site Limited, New Zealand. Contact: sites@hedgehogsite.com.

## Main pages
- [Home: how Hedgehog works, pricing and FAQ](https://hedgehog.site/)
- [Free website safety quiz](https://hedgehog.site/quiz/): two minutes, a safety score out of 100 and an emailed report with fixes for your platform.
- [Free guide: Is your website safe? (2026, PDF)](https://hedgehog.site/guide/): plain-English guide with five easy wins, every fact sourced.
- [Spot It, Stop It: free 7-day e-course](https://hedgehog.site/course/): one short lesson a day with a one-minute video and a checklist.
- [Website safety library](https://hedgehog.site/security/): eleven plain-English website security guides for small business owners.
- [Privacy policy](https://hedgehog.site/privacy/) and [Terms and conditions](https://hedgehog.site/terms/)

## Website safety library
- [Why small business websites get hacked](https://hedgehog.site/security/why-small-business-websites-get-hacked/): Nobody picks out a plumber's website to hack. Robots scan millions of sites a day for one weak spot. Here's what they're after and why size doesn't protect you.
- [How AI changed hacking for small businesses](https://hedgehog.site/security/ai-and-website-attacks/): AI made old attacks cheaper, faster and more convincing. What changed in 2025 and 2026, what it means for a small business website, and what still works.
- [Signs your website has been hacked](https://hedgehog.site/security/signs-your-website-has-been-hacked/): Most hacks are built to stay hidden. The nine kinds we see most on small business websites, what each looks like from your side, and how to check today.
- [What a hacked website really costs a small business](https://hedgehog.site/security/cost-of-a-hacked-website/): The clean-up bill is usually the smallest part. Money, Google rankings, legal duties, email deliverability and your reputation: the eight real risks of a website hack.
- [Ten website security myths small businesses still believe](https://hedgehog.site/security/website-security-myths/): "We're too small." "My host handles it." "I've got the padlock." Ten common beliefs about website security, and what the evidence says.
- [The WordPress security checklist for small businesses](https://hedgehog.site/security/wordpress-security-checklist/): 91% of new WordPress security holes are in plugins. A 12-step checklist to close them, from cutting plugins and two-step login to backups and monitoring.
- [Website security best practice for any small business](https://hedgehog.site/security/website-security-best-practices/): Whatever your site runs on (WordPress, Wix, Squarespace or custom), the same habits stop most attacks. Own your domain, lock your logins, protect your email name.
- [How a laptop hack becomes a website hack](https://hedgehog.site/security/infostealers-and-website-logins/): Infostealer malware copies saved passwords and logged-in sessions, and can skip two-step login. How it reaches your website, and the device habits that stop it.
- [Static site vs WordPress: which is more secure?](https://hedgehog.site/security/static-site-vs-wordpress-security/): Every lock guards a door. The safest door is the one that isn't there. How static sites and CMS sites like WordPress differ on security, speed and upkeep.
- [Your easy website safety checklist](https://hedgehog.site/security/website-security-checklist/): Grab a coffee and work down this nine-step website security checklist. Each line takes a few minutes and closes a door used in most small-business break-ins.
- [Website hacked? What to do in the first hour](https://hedgehog.site/security/website-hacked-what-to-do/): Don't panic and don't delete anything yet. An eight-step plan for small business owners whose website has been hacked, plus where to report it in each country.

## Spot It, Stop It lessons
- [Lesson 1: You're not a target. You're a match.](https://hedgehog.site/course/lesson-1/): The three questions every hacking robot asks about your site.
- [Lesson 2: The front door: how passwords really get stolen](https://hedgehog.site/course/lesson-2/): Hint: it's rarely guessing. And one free setting stops most of it.
- [Lesson 3: The side doors: plugins, add-ons and old software](https://hedgehog.site/course/lesson-3/): The number one way in is no longer passwords. It's this.
- [Lesson 4: The email trick: scams that look real](https://hedgehog.site/course/lesson-4/): Spelling mistakes used to give them away. Not any more. Here's what does.
- [Lesson 5: Your laptop is part of your website](https://hedgehog.site/course/lesson-5/): How one click at home can skip your two-step login altogether.
- [Lesson 6: The keys: your domain, your email and your backups](https://hedgehog.site/course/lesson-6/): One account controls your website and your email. Do you know where it is?
- [Lesson 7: Spot the signs, and the door that isn't there](https://hedgehog.site/course/lesson-7/): Most hacks are built to stay hidden. Here's how to spot one, and how to never need to.

## Frequently asked questions about Hedgehog
### My site's tiny. Is it really worth moving? Nobody's going to target me.
That's the most common myth. Hardly anyone picks a site to attack by hand. Bots scan millions of websites every day looking for an old plugin or a weak login, and they don't care how big the business is. Small sites are often easier pickings, because nobody's watching them. In the US alone, 2,700+ people and businesses reported online crime to the FBI every day in 2025. Moving takes the weak spots away, so you're not left hoping the bots pass you by.

### Can my site really not be hacked?
We won't promise that nothing could ever go wrong, because no honest company can. What changes is that your site no longer has the parts robots usually break into: no login page, no plugins and no database. The main risk left is someone getting into your domain or email account, so we help you protect those with two-step sign-in.

### Will my site look the same?
Yes. We move it as it is, just faster. If you'd like anything tidied up while we're at it, say so when you check the preview.

### What about bookings, quotes and payments?
Contact and quote forms are included and go to your inbox. Booking tools you already use, such as Fresha, Timely, Cliniko or Calendly, and payment links from Square or Stripe, keep working as links or buttons. If something on your site can't come across, we'll tell you during the preview, before you pay.

### I'm not techy at all. Will I manage?
If you can send a voice note, a text or an email, you can update your website. Say what you want in your own words, the way you'd tell a staff member. Every change comes back as a preview, and nothing goes live until you say yes.

### How do you know a change request really came from me?
Hedgehog only accepts change requests from the phone numbers and email addresses you've authorised. A message from anywhere else is ignored. Every change then comes back to you as a preview, and it only goes live after you confirm it with a two-step check, such as a one-time code sent to your authorised phone or email. So even if someone fakes your email address, they can't publish anything on your site.

### Will I lose my spot on Google?
We bring across your page titles, descriptions and wording, and make sure every old page link points to the right new page. Faster pages usually help rather than hurt, though no one can guarantee a ranking.

### My site's already been hacked. Can you still move it?
Yes, and you don't need to get it cleaned up first. As long as we can see your site in a browser, we can rebuild it. We copy your wording, pictures and layout, not the hacked code behind them, so the new Hedgehog version starts clean, without the spam pages, redirects or hidden links. Your old site can then be switched off for good.

### My site is on Wix, Squarespace or Weebly. Can you still move it?
Yes. We start from your live website, so it doesn't matter which builder made it. Your web address moves separately, and we'll walk you through it.

### What if I want to leave?
Your site is made of standard web files that any host can run. Ask, and we'll send them to you.

## Optional
- [Full text of every guide and lesson](https://hedgehog.site/llms-full.txt)
- [Sitemap](https://hedgehog.site/sitemap-index.xml)