Are you using wordpress or some other free cms? If you are using wordpress have a look at our guide about how to secure your WordPress web site.

If it's custom software then your developer should...