Secure My Website

@sharphue This is the solution for private blogs and SME's. Thanks!

@raymond_zwarts Thank you for taking the time to check it out! You hit the nail on the head for the target audience who may benefit the most. Small businesses and freelancers absolutely come to mind. Those folks are much less likely to have a technical person on staff. Let us know if you're interested in taking advantage of the Product Hunt special for a no-cost HTTP to HTTPS website conversion!

@sharphue yeah why not... Im interested.

@raymond_zwarts I look forward to it! Would you please go ahead and fill out the form here and mention Product Hunt? We'll be in touch to schedule the consultation with you soon: https://www.securemywebsite.net/...

@joergst I love this feedback and appreciate that you took time to detail a few ideas of what you would want in an FAQ page! I couldn't agree more -- we'll get that FAQs set up asap to help customers understand the process. I'll send you a PM with our DIY guide notes that outline some of these points in the meantime. As I'm catching up today, I'm stoked about this reoccurring idea in the comments of agency discount or volume discount. That would presumably allow anyone who works with clients, to outsource this need to us. Is that the kind of reason you were thinking about volume discount or is it for multiple sites you operate?

@sharphue Actually it would be BOTH! I run a few sites and at the same time I could imagine promoting your service to people I help with marketing.

@joergst Music to my ears! I'm running on adrenaline from a great Hunt today and will be tackling the volume concept soon. Let's stay in touch!

@thijs_sondag That's cool you mention Let's Encrypt 👌 They changed the whole game and their certs are what Secure My Website is based on. Tackling the command line to get a cert installed can be a bit tricky -- I totally know what you mean, and I'm glad somebody said it. Preach! 📣 We are still getting our bearings on the wildcard SSL from Let's Encrypt since it's only a few months old. That's a great idea to offer a support package for wildcard. Let me know if you're interested in getting some free support for your installing your single SSL site, as a thank you for valuable feedback!

@ikayhargley Your question is awesome and got us thinking about how we can offer that solution. I think that's a big opportunity and a service that agencies might like to outsource to a partner. Let's do this! I will shoot you a PM and keep you posted on our plans. Thanks again for taking time to review and share your ideas.

@blossomshirts I like to hear that about no fees! That usually means you are on a website hosting provider that makes SSL easy and free like it should be. What we've learned over the past several months is that there are many website hosting companies that aren't doing a great job with it unfortunately and still choose to charge customers. We use Let's Encrypt Free SSL certificates and our service is to provide the white-glove care targeted towards non-technical webmasters such as small business owners. For our fee, we spend the time needed to get these non-technical folks set up correctly with SSL. After the installation, we take additional steps to ensure redirects are implemented correctly to pass SEO value, and we update any hardcoded URLs in code or pages to avoid insecure domain warnings. May I ask who you host with? Kudos to them!

@sharphue Digital ocean droplet, and i am using lets encrypt too. If you wanna make product make it easy to install lets encrypt to these digital ocean like shared servers. And sell it at less price people (no knowledge of ssl) will buy like candies.

@blossomshirts @sharphue setting let’s encrypt for any service or server is nearly pain free if you look in GitHub for a free open tool called acme, otherwise takes little knowledge about any Linux distribution to set it up and set the cron job to renew it.

Also, how about update when cert expired? Is that also covered?

@jasonser Jason, you absolutely made my day when I read your comments and feedback. Everything you said is totally on point and reminds me of our initial motivation for helping small businesses and bloggers avoid issues while tinkering on a Live site, getting mixed content errors, and converting http to https in Google's eyes. It can be such a hassle for this kind of customer and that's a barrier to making the web safer! Things should not be that way, and our service aims to solve this pain point. I'll be in touch very soon on PM to share some thoughts on the agency and volume discount pricing, and reseller opportunities. The great feedback here during Hunt day has inspired a completely new channel for growth and we would love to partner with folks like you who "get it"! Thanks again for your support and interest in what we're doing!

@sharphue you are welcome. Apart from reseller/volume discount..etc, you may have missed my other questions, so here are the questions again... - What is the estimate timeframe for you to complete an install? - Will you provide a report of any kind to your client? - I assume we will need to add you guys into Google Search Console for submitting our site, right? - Update for cert expiry? Are they included? Cheers Jason S

@jasonser Jason, thanks for pointing this out and calling some attention back to these questions. Typically, we can have the SSL installation completed within 24 hours of purchase. It usually involves a little bit of scheduling and making sure we know what is considered "off-peak" for the business / website. In the cases where a client has entrusted us with their credentials via LastPass, we will take care of the SSL Installation at the designated/agreed upon time and provide an email summary of all settings and files changed on their website hosting. We are happy to teach our customers how to re-add the HTTPs version of their site to Google Search Console under their Google Account. We prefer to use Google Analytics verification over writing a file to the server (or other validation methods) and therefore it's best if the business owner is guided on how to do these steps. Otherwise we would also need Google Analytics access. In other words, we do not need access, or have a desire to claim site ownership in Google Search Console. If the customer's hosting allows us enough admin access to install the free Let's Encrypt SSL Certificate, we take that approach. In that case renewal is auto-renewing occurs every 3 months for a 3 month period -- it's awesome! In the case the customer's hosting does not allow us to use Let's Encrypt, the customer would simply pay us the fee again in the future to assist them with renewal, if they want to.

@derk_jan_karrenbeld Thank you for taking time to provide this feedback. You've made an excellent point that we need to get our site GDPR compliant as soon as possible. Honestly, we had no idea how well received the idea of this service was going to be and thought we might get a little interest in the U.S. at first. Product Hunt has helped give us a platform to spread our vision to interested customers around the world and it's time to step up our compliance and advocacy of privacy on our marketing website. I will cherish the day that this service is being offered for free in all shapes and forms. My team is a small team and they are paid staff, so most of the monetary side of our service simply pays for their time and expertise. When we launch our client's websites in our main line of work, we do not charge any additional for this service, so in some ways that is free. Though, it's really just more subsidized because we are getting paid for their website design & development project.

@sharphue Naturally! There are about 4 things I test new products on which are important to me and this two of them. I think it's smart to offer this product as many people actually don't know / don't want to install SSL certificates, and that definitely includes the "rest of the World", or as we call it "The World". As far as the product goes, I think apart from GDPR, you really need a TOS and Privacy Policy on that footer, as well as indications how long X takes with common platforms (AWS, Azure, Digital Ocean, Wordpress/whatever). That feels missing. Also don't forget that GDPR-like laws are being introduced in California :)