Software specifically for protecting your site.
WHAT TO LOOK FOR
Scheduled automatic backups
Remote storage: Google Drive, Dropbox, or your own storage
Both files and database Retention management, removing old copies Restore functionality that actually works Notification of success or failure
WHAT TO AVOID
Tools storing backups only on the same server, which are lost in the same event that loses the site Tools with no retention policy, which fill your disk Tools you have never tested a restore from
THE CRON DEPENDENCY
Scheduled backups depend on cron. On our servers WordPress needs a real cron job, since HTTP wp-cron is blocked.
A backup plugin configured and never running is common, and the owner does not find out until they need it.
Verify the backups exist rather than assuming the schedule works.
RESOURCE USE
Backups consume CPU and I/O. Schedule them at quiet hours. Very large accounts may hit limits.
TESTING
Restore one to a staging subdomain. Once. That single test is worth more than any amount of configuration.
