No tested backup, updates 8 months behind, SSH wide open, and as a recovery plan… the number of a freelancer who no longer answers. 43% of Swiss SMEs have no documented recovery plan. We take over your infrastructure, we harden it, and you stop playing Russian roulette with your business.
Most Swiss SMEs discover the weaknesses in their hosting on the day it is too late. Site down, data lost, clients gone. Here are the three scenarios we see every week.
The average cost of an hour of downtime for a Swiss SME is CHF 5’400.-. Lost sales, productivity blocked, clients going to a competitor. An e-commerce site turning over CHF 50K/month loses CHF 70.- a minute. And your shared host at CHF 15.-/month? Its SLA guarantees nothing. No compensation, no on-call service, a support ticket handled “within 24 hours”.
Your host runs “automatic backups”. You have never checked whether they work. The day your database is corrupted or ransomware encrypts everything, you discover the backup is 3 weeks old, that it is incomplete, or that the restore procedure has never been tested. Everything you built over 5 years (content, orders, client data) disappears in a second.
SSH on port 22 with a root password. PHP 7.4 at end of life. 12 plugins never updated. No WAF, no fail2ban. Your server is scanned hundreds of times a day by automated bots looking for exactly these weaknesses. It is not a question of “if” but of “when”. And when it happens, your CHF 15.-/month host will tell you: “that is not in our scope”.
You pay CHF 180.-/year to your shared host. But this year your site went down twice (CHF 10’800.-), you spent 20 hours dealing with updates and server bugs (CHF 3’000.- of your time), and your developer billed CHF 1’200.- for an “emergency clean-up” after an SQL injection. Real total: CHF 15’180.-. And you still have no reliable backup, no monitoring and no recovery plan.
Managed hosting at CHF 200.-/month costs you CHF 2’400.-/year. And it removes the CHF 15’000.- of hidden costs. It is not more expensive. It is 6 times cheaper.
The new Swiss federal data protection act, in force since September 2023, imposes strict obligations on every company that processes personal data. Protection of personal data, right to erasure, notification in the event of a breach. And a maximum fine of CHF 250’000.- under the personal liability of the company director. Not the company. The director.
If you have clients in the EU, GDPR applies on top. Whether you are in Geneva, Lausanne, Fribourg or anywhere else in French-speaking Switzerland, your shared hosting does not protect you. You are the one responsible for the security of your data.
Maximum fine under the Swiss data protection act. Personal liability for company directors
Of Swiss SMEs with no documented recovery plan
WordPress sites hacked every day worldwide
Of server incidents avoidable through preventive maintenance
Every sector has its own security, availability and compliance requirements. Here is what we deploy, with measured outcomes.
Client financial data, tax returns, supporting documents. If your server is compromised, that is a breach of the Swiss data protection act with criminal consequences. Swiss datacenter hosting, full encryption, zero trust VPN for staff access, encrypted offsite backups.
Typical outcome: Swiss data protection compliance reached in 3 weeks
Professional confidentiality plus Swiss data protection means zero tolerance on security. An isolated server, VPN-only access, audit logs, a tested recovery plan. Your client files never pass through a shared server hosting 200 other sites.
Typical outcome: zero incidents in 18 months
Your store turns over CHF 50K/month. Every minute of downtime = CHF 70.- lost. An optimised LEMP stack, Redis, Cloudflare CDN, autoscaling for the peaks (Black Friday, campaigns), transactional backups so an order is never lost.
Typical outcome: TTFB cut by four, zero Black Friday downtime
Patient data is sensitive data under the Swiss data protection act. Certified healthcare hosting, a Swiss datacenter as a requirement, encryption at rest and in transit, a full audit trail, role-restricted access.
Typical outcome: full compliance, audit passed first time
Your booking site has to be available 24/7 in 3 languages. An integrated PMS, a multi-domain SSL certificate, a CDN for international visitors, real-time monitoring, immediate response if the booking engine fails.
Typical outcome: 99.99% uptime, 35% more direct bookings
You manage 10 to 50 client sites on one server. Per-site isolation, centralised monitoring, grouped updates, escalation support for your own clients. You stop playing sysadmin at weekends.
Typical outcome: 15h/month recovered, zero client incidents
Most suppliers start by migrating. We start by understanding your infrastructure, identifying the risks and costing the fixes. No surprises.
What is running on your server, and in what state?
A full audit: OS, stack, WordPress/WooCommerce versions, plugins, performance, security, existing backups. Deliverable: a report with a health score and prioritised recommendations.
How business-critical is your setup?
Sets the SLA, the level of monitoring, the backup strategy and the recovery plan. A personal blog and an e-commerce site turning over CHF 50K/month are not managed the same way.
What regulatory constraints do you have?
Swiss data protection, data location, a regulated sector: this sets the level of security and isolation required.
Lausanne accountancy firm, 1 OVH VPS
The server audit is included in any 12-month managed hosting contract. Outside a contract, the audit is billed and the report is yours.
There is no single best infrastructure. There is the one suited to your traffic, your data and your requirements. Here is our transparent recommendation.
Choose this if:
Points to watch:
Choose this if:
Points to watch:
Choose this if:
Points to watch:
These prices are per site (tier 1) or per server (tiers 2 and 3). They include full management, monitoring, backups and support. The initial server audit ahead of any upgrade, and the costs of those upgrades, are not included. They are costed in the audit report.
Managed WordPress/WooCommerce, Plesk or cPanel, daily offsite backups (30-day retention), 24/7 uptime monitoring, auto-renewed SSL, monthly WordPress and plugin updates, 48-hour email support. Ideal for the SME that wants to sleep easy.
Typical timeline: 1-week setup
Everything in tier 1 plus a staging environment, an optimised stack (Redis, object cache, Cloudflare CDN), active security (WAF, fail2ban, weekly malware scan), a guaranteed 99.9% uptime SLA, priority 4-hour support, monthly performance and security reports. For SMEs whose site generates business.
Typical timeline: 2-week setup
Everything in tier 2 plus a zero trust VPN for staff, disaster recovery with point-in-time restore (RPO < 1h), full hardening (CIS benchmarks), emergency on-call cover (response < 15 min), a recovery plan documented and tested quarterly, a quarterly security audit, Swiss datacenter hosting. For companies where downtime is not an option.
Typical timeline: 2-4 week setup
Server security is a continuous process, not a one-off intervention. In the first months, we fix and stabilise. In the months that follow, we optimise and prevent. A 12-month commitment lets us carry that work through over time and guarantee you a fixed monthly price, with no surprises. If after 12 months you are not satisfied, we hand everything over cleanly. Free of charge.
A complete scan of your server: OS, technical stack, WordPress and plugin versions, performance (TTFB, response time), security (open ports, access, certificates), existing backups. Deliverable: a report with a health score and recommendations prioritised by criticality, with the upgrades costed.
Immediate critical fixes: updates, security patches, SSH configuration, firewall, fail2ban, WAF. Migration to a new server if needed. Automated offsite backups configured with 30-day retention and encryption.
Switchover to the secure infrastructure, restore tests from the backups, activation of 24/7 monitoring (uptime, performance, security). Full documentation of the entire infrastructure: access, configurations, emergency procedures.
Regular updates, security patches, performance optimisation, monthly reports, periodic restore tests, infrastructure evolving with your needs. A quarterly review to anticipate problems before they happen.
“Our shop crawled during the sales and kept going down at peak times. Smart Impact migrated our WooCommerce store to an optimised VPS with Redis and Cloudflare. TTFB went from 3.2 seconds to 0.4 seconds. On Black Friday our site took eight times its usual traffic without flinching. Zero downtime.”
“Our site was hacked on a Friday evening. Smart Impact stepped in within four hours, cleaned up the malware, restored from a clean backup and deployed a zero trust VPN to secure access. Eighteen months on, not a single incident. Our clients trust us with sensitive data. That peace of mind is priceless.”
It is your server, your code, your data. Full root access from day one. If you leave, we hand everything over cleanly, free of charge. No exit fees, no retention clause.
An untested backup is worth nothing. We run regular restore tests and send you the proof. If a backup fails, we detect it and fix it before you need it.
On the critical tier, someone picks up. Not a chatbot, not a ticket. An engineer who knows your infrastructure and can act in under 15 minutes.
Managed WordPress hosting or a dedicated server: we take charge of the performance and security of your infrastructure.
Fast, secure WordPress hosting with daily backups, without you having to worry about the technical side.
Discuss my projectScalable VPS servers that absorb your traffic peaks and support your growth in load.
Discuss my projectManaged dedicated servers with 24/7 monitoring, disaster recovery and a zero trust VPN.
Discuss my projectAny other questions? Contact us directly for an initial scoping conversation.
Our managed hosting contracts start at CHF 90.-/month per site for managed WordPress with backups, monitoring and support. Managed VPS for SMEs start at CHF 200.-/month per server. Critical infrastructure with a zero trust VPN, disaster recovery and 24/7 on-call support starts from CHF 500.-/month. The commitment is 12 months. Server security is a continuous process, not a one-off intervention. The initial audit is included in any 12-month contract.
Shared hosting puts you on a server with hundreds of other sites. It is cheap, but you have no control over performance, security or configuration. A VPS gives you an isolated virtual server with guaranteed resources and full root access. A dedicated server is a physical machine entirely yours: maximum performance, total isolation, ideal for sensitive data or high-performance e-commerce. Our recommendation for most SMEs: a managed VPS. The performance-to-price ratio is unbeatable.
Yes. We carry out zero-downtime migrations by preparing the new server in parallel, synchronising the data, then switching the DNS once everything has been checked. The whole process takes 48 to 72 hours depending on complexity. During the migration, your site stays online on the old server. We check every page, every feature and every email after the switch before considering the migration complete.
If your sector requires it, finance, healthcare or legal, we host your data exclusively in Swiss datacenters. In other cases we recommend tier 3+ European datacenters, which offer excellent value. In every case, your data is encrypted in transit (TLS 1.3) and at rest, and the offsite backups are encrypted too. Swiss data protection compliance is built into every configuration.
Immediate response: the site isolated, the attack vector identified, the malware fully cleaned out, restored from a clean backup if needed, then post-incident hardening so it does not happen again. We give you a detailed incident report. On our managed contracts, the clean-up is included, with no surprise invoice. Our average resolution time for a WordPress hack: under 4 hours.
The initial server audit is included in any 12-month managed hosting contract. It covers a full scan of your infrastructure, a health score, and a report with prioritised recommendations. The costs of the upgrades identified during the audit, migration, hardware upgrades and licences, are costed separately in the report. Outside a contract, the audit is billed and the report is yours. You are free to implement it yourself.
Server security is a continuous process, not a one-off intervention. In the first months, we fix the existing problems and stabilise the infrastructure. In the months that follow, we optimise and prevent. A 12-month commitment lets us carry that work through over time and guarantee you a fixed monthly price. If after 12 months you are not satisfied, we hand everything over cleanly to the supplier of your choice, free of charge.
A zero trust VPN starts from the principle that nobody is trusted by default, not even your own staff. Every connection to the server is authenticated, encrypted and verified, whether the user is in the office or working remotely. In practice: your staff reach internal tools through a secure VPN tunnel, with two-factor authentication. Nobody can reach the server without being identified. It is the protection against internal data leaks, credential theft and unauthorised access, the three main causes of corporate data breaches.
Your site, your store, your tools: everything rests on solid infrastructure. We handle the technical side so you can concentrate on your business.
Tell us about your current infrastructure (host, type of server, number of sites). We will look at your situation and come back within 48 hours with a reasoned view: the risks identified, the improvements available, and on what conditions we would step in. The server audit is included in the 12-month contract.
Question 1 of 5