Security Hardening
A practical WordPress security hardening checklist
You cannot make a website impossible to hack — but you can make it a much harder target. Here is a sensible place to start.
July 14, 2026
You cannot make a website impossible to hack — but you can make it a much harder target. Here is a sensible place to start.
The first hour after you find a compromise matters. Here is how to limit the damage before the cleanup even begins.
The first hour of a security review decides whether the rest is useful. Here is the order I work in, and why.
Malware is designed to hide. These are the symptoms that tend to give it away before real damage is done.
A compromise rarely announces itself. Here are the quieter signs that something is wrong before your visitors are the ones who notice.