Cybersalt Consulting Ltd. is a Joomla-focused web development and hosting firm on Vancouver Island, British Columbia, Canada, in business since 1998. We build, host, secure and repair Joomla websites for clients around the world. Security is a core part of that work, not an add-on.
Security leadership
Tim Davis โ Founder and Head of Security, Cybersalt Consulting Ltd.
Tim leads all security work at Cybersalt: incident response on compromised sites, malware and backdoor removal, vulnerability management across the sites we host and manage, server hardening, and security review of the Joomla extensions we develop. He founded Cybersalt in 1998 and has worked with Joomla since before it was Joomla, back when the project was still called Mambo.
- LinkedIn: linkedin.com/in/cybersalt
- YouTube: Basic Joomla Tutorials (@Basicjoomla), more than 800 free Joomla training videos and Watch Me Work livestreams since 2013
- Author profile: cybersalt.com/tim-davis
- Speaker: JoomlaDay USA, five consecutive years (2022โ2026), and Joomla World Conference 2026 (Potsdam, Germany)
- Press: profiled in the Joomla Community Magazine, "Tim Davis, from pastor in life to Joomla evangelist" (November 2024)
What we do
Compromise cleanup and incident response. When a Joomla site is hacked, we run a full account-level malware sweep, find and remove injected code, backdoors and webshells, identify and close the entry point, harden the site and verify the result before bringing it back online.
Vulnerability management. Sites on our Monthly Joomla Website Management plan get weekly automated security audits and continuous monitoring of Joomla core and extension versions against known vulnerabilities. We test patches before we deploy them.
Server and site hardening. We run Joomla hosting on our own infrastructure and handle server configuration, firewall rules, file permissions, access control and off-server backups with Akeeba Backup Pro.
File integrity and override review. We check Joomla template overrides and core files for tampering or unexpected changes. Our cs-template-integrity extension came out of that work.
Secure extension development. We develop and maintain the cs-* family of Joomla extensions, and Tim leads development and support of StageIt and MigrateMe 4 for PHP Web Design. Each release is security-reviewed before it ships.
How we work
We only test, scan or remediate systems that Cybersalt owns or operates, or that a client has authorized us to work on. Client access is limited to what each job needs, and credentials are never shared between clients.
Reporting a vulnerability
To report a security issue in one of our extensions or in a site we host, or to ask about a security engagement, email Tim directly at
Cybersalt Consulting Ltd. โ 3486 Metchosin Road, Victoria, BC, V9C 2B2, Canada โ About Cybersalt
Add comment