Security
Kapsule Protect Overview
Kapsule Protect is the umbrella name for the five add-on products that make a site production-grade: extended backups, Premium DNS, SSL, Kapsule Care and Pro Services.
What Kapsule Protect Is
Hosting runs your site. Protect is the separate layer that makes it survivable: what happens when a server dies, when an origin goes down, when a plugin update breaks checkout, when you need work done that nobody on your side can do.
It is a way of grouping five things that are bought and managed independently. There is no single Protect subscription and no bundle price. You add the parts you need.
Everything in Protect is reached from Store in the KPanel sidebar. SSL, Backup and Care sit in the Protection section, Premium DNS sits under Email, DNS and network, and Pro Services sits under Services and programs.
The Five Parts
| Product | What it is for | Where it lives |
|---|---|---|
| Extended backup retention | Keeping restore points beyond 30 days | The site's own Backups tab, or /backup |
| Premium DNS | Anycast resolution with automatic failover | /premium-dns |
| SSL certificates | Certificates beyond the free ones | /ssl |
| Kapsule Care | Ongoing managed maintenance | /care |
| Pro Services | One-off expert engagements | /services |
Backups and Extended Retention
Every site on Kapsule is backed up automatically once a day, and 30 days of retention is included with every plan. You do not buy that; you already have it.
What you can buy is longer:
| Retention tier | Kept for | Price |
|---|---|---|
| Included | 30 days | Included |
| Backup 90 | 90 days | US$3.00/mo |
| Backup 1-Year | 365 days | US$9.00/mo |
| Backup 7-Year | 7 years | US$29.00/mo |
Extended retention is set on the site's own Backups tab, or bought from Store, then Backup.
Retention is the only thing you are buying here. A longer window does not make backups more reliable, it makes them reach further back. If your concern is "I need to undo something from last Tuesday", the included 30 days already covers you. If it is "our auditor needs three years of restore points", it does not.
Full detail in Taking a Backup and Restoring From a Backup.
Premium DNS
Every domain on Kapsule already resolves from our four-nameserver DNS cluster, and that is included. Premium DNS is the upgrade for a domain that cannot afford to answer slowly or point at a dead origin:
- Anycast resolution, so visitors are answered from the nearest node.
- Health-checked failover: an unhealthy origin is removed from DNS answers automatically until it recovers.
- Two origins per zone, one million queries included per month.
It is bought per zone at US$11.00/mo. See Premium DNS.
SSL Certificates
Every site on Kapsule gets a free certificate, issued and renewed automatically. Nothing to buy and nothing to configure.
The /ssl surface exists for the cases the free certificate does not cover, typically where you need a certificate with organisation validation or a warranty behind it rather than domain validation alone.
Start from the assumption that you do not need a paid certificate. Browsers treat a free domain-validated certificate exactly the same as a paid one for encryption and for the padlock. Buy a paid certificate only when a specific requirement, usually a compliance or procurement one, names it.
See SSL Certificates and Fixing Mixed Content Warnings.
Kapsule Care
Kapsule Care is the ongoing half of Protect: our engineers apply your updates, run them through a staged and tested pipeline before they touch production, monitor the site, log real engineer hours against your account, and publish a monthly health report.
Three plans, from one to three engineer hours a month, with unused hours rolling over. Full detail in Kapsule Care Overview, and the store-specific tier in Kapsule Care for WooCommerce.
Pro Services
Pro Services is the one-off half. Migrations, WordPress speed work, WooCommerce setup, DNS configuration, SEO audits, security audits, custom plugin development. Each is scoped, priced before work begins, delivered by our engineers, and closed only when you sign it off.
See Pro Services.
Choosing What You Actually Need
Rather than buying the set, work backwards from what would actually hurt:
- "If this site vanished I would lose years of content." Extended backup retention.
- "If the origin goes down, visitors must still reach something." Premium DNS with failover.
- "Our compliance policy names a certificate type." SSL. Otherwise the free certificate is correct.
- "Updates keep breaking things and nobody here has time." Kapsule Care.
- "There is a specific job I need done once." Pro Services.
Most sites need one or two of these, not five.
What Protect Does Not Replace
Two honest limits:
- Protect is not a substitute for your own copies of things. Backups cover your site files and database. Services you connect to your site, a payment gateway, a marketing platform, an external email provider, hold their own data and are not captured. Export from those separately.
- Protect is not a security guarantee. Care includes malware monitoring and a security audit is available as a Pro Services engagement, but no maintenance plan makes a site immune. Keep two-factor authentication on your account and keep your own admin hygiene tight.