Security and accessibility solutions

For NHS organisations, accessibility isn’t just a box to tick - it’s a commitment to making sure everyone can use your site with ease. Public sector websites are required to meet WCAG 2.2 AA standards, and the Cabinet Office keeps a close eye with regular audits. Their guidance? Review and fix your site at least once a year.

At Frank, we make that easy. Our fixed-price review & fix service covers a full accessibility audit and all the updates needed to get your site or extranet fully compliant. No jargon, no surprises, just a site that works for everyone.

Let’s make your site accessible to all - book your review today via Frank Support.

Small changes can make a big difference. We now offer a specialist font designed by a dyslexic user, allowing your entire website to switch to a more readable, user-friendly typeface. It’s a simple upgrade that can improve the experience for a significant number of visitors. Ask us about adding the dyslexic-friendly font to your site.

We can upgrade your platform to the latest specification, keeping it safe, reliable, and ready for whatever’s next. Upgrading to the latest version of the CMS will expand the lifespan of your platform, giving you the latest version install and all the associated benefits such as:

Enhanced security

• Addresses vulnerabilities: Each update typically includes fixes for known security issues, reducing the risk of hacking or data breaches
• Compliance: NHS digital requires NHS organisations to have no unsupported software
• Server environment: Updates ensure compatibility with newer PHP versions and hosting environments, meaning your sites can be migrated as our environments are updated

Improved performance

• Optimised code: Updates include performance enhancements that make your site faster and more efficient
• Better resource management: New versions may reduce server load and improve caching

Access to new features

• Better UI/UX: Updates often refine the dashboard and editing experience for administrators
• Modern functionality: If we are upgrading your site, we can also add new blocks and features we've developed for other client to improve user experience.  Just ask us for a site review and we can show show you what we recommend for your site

Long-term stability

• Reduced future costs: regular updates prevent your site from falling behind, which can make future upgrades more complex and costly
• Vendor support: the CMS community and official support typically focus on the latest versions.  Being on an older version may mean your product becomes unsupported.

Talk to your Account Manager today about upgrading your site.

To keep your latest version CMS updated, take out a support package to ensure that your site is upgraded to the latest versions twice a year. Offering extended lifespan and enhanced functionality, we will ensure your website has the very latest CMS each year.  This enables you to have a fixed cost which can be planned for annually.

Contact your Account Manager for more information

The world of Cyber Security is rapidly changing, with large scale cyber security incidents being seen to affect even the largest of commercial organisations. That is why at Frank we are asking all our clients to use a WAF (web application firewall).  We can arrange, source and manage this for you via our third party product Cloudflare.

Cloudflare is a security tool that protects your websites before they reach your servers acting as a reverse proxy. In the modern day, attacks are getting more frequent and sophisticated. Therefore, for any public facing site receiving traffic, Cloudflare is always something we would recommend. Below are some of the main features that Cloudflare offer.

Cloudflare offers the following -

Web Application Firewall (WAF)

Protection to protect against intelligent, malicious attacks to your websites like SQL Injections etc.  Traffic is stopped before it reaches our server.  It has powerful geo-blocking technology, meaning we completely block traffic from certain high risk countries if needed.

DDoS protection

To prevent denial of service attacks that grind your websites and servers to a halt due to extremely large influxes of malicious traffic. As Cloudflare sits in front of your servers, it will prevent heavy traffic from reaching the firewall and server, which may cause bottlenecks and issues on your solution.

Bot Management

By using machine learning and behavioural analysis, Cloudflare can detect and block malicious bots, whilst allowing good bots, like search engines, to operate.

Content Delivery Network (CDN)

Distributes content around the world to improve performance of your websites by caching static content across Cloudflare 300+ data centres around the world.

Smart Tiered Caching

Cloudflare stores copies of your website content across multiple layers around the world. Visitors are served content from the closest location, which makes the site load faster and reduces strain on your server.

Polish & Mirage (Image Optimisation)

These tools automatically optimise your website’s images to load faster without losing quality. They adjust images depending on the visitor’s device and connection speed, improving both performance and user experience.

Accelerated Mobile Pages (AMP)

Cloudflare supports AMP, which creates ultra-fast versions of your web pages for mobile users. This is especially helpful for improving speed on slower mobile connections.

Page Shield

This feature monitors any third-party scripts running on your site (such as analytics tools or payment widgets) and alerts you if they’ve been tampered with or contain malicious code. It helps protect against supply chain attacks that often go unnoticed.

Contact your Account Manager for an annual price.  Prices are per domain, with any subdomain included with no additional charge. 

In today’s digital age, security breaches are an ever-present threat. Cyber-attacks are becoming more sophisticated and frequent prompting the government to create a plan to bolster cyber resilience across the health care sector by 2030. Protecting sensitive information and ensuring secure access to your systems has never been more critical. The introduction of the NHS Digital policy on multi-factor authentication states that:

‘Organisations: must enforce MFA on all privileged user access to externally-hosted systems’.

Our Multi-Factor Authentication solution offers a robust, easy-to-implement, and user-friendly method to enhance your security measures and help safeguard your organisation’s valuable data.

The NHS MFA policy states that:

“Compromising user accounts is a starting point for many cyber security attacks… Industry research suggests that MFA can prevent 99.9% of account compromise attacks, and MFA is widely considered by cyber security authorities globally to be one of the most important controls that any organisation can deploy."

Contact your Account Manager or Frank Support for more information

If your site currently uses an older style “Got it!” cookie pop-up, then it needs updating. The ICO policy mandates that users must have the option to decline the use of cookies. Essentially, we need to allow users to disable cookies while still being able to use the site. The previous setup forces users who do not consent to tracking to leave the website.

The latest cookie update will include:

• Adding a “Decline Cookies” button for users
• Implementing code to ensure Google Analytics and other tracking tools are inactive unless users click “Accept Cookies”
• Moving the cookies option pop-up to a corner, allowing users to change their preferences at any time
• Updating the wording of the cookies policy on your website

This upgrade will ensure compliance with the latest ICO requirements.

Contact your Account Manager or Frank Support for more information