The One-Hour DIY WordPress Security Audit
A methodical, hour-long pass through users, updates, permissions, exposure, and backups that closes the door on most real-world WordPress attacks.
Tag
wordpress security
All posts in this stream, newest first.
A Zero-Day Dropped for a Plugin You Run: Now What?
When a zero-day hits a plugin in your stack, the first hour matters more than the fix itself. Here is a calm, ordered way to triage it.
Password Managers for Site Teams: Ending Shared Spreadsheets
A shared spreadsheet of logins is a liability waiting to happen. Here is how to move a WordPress team onto a real password manager with proper role scoping and a clean offboarding process.
.htaccess for WordPress: The Rules Worth Knowing
A plain-language tour of what .htaccess actually controls on a WordPress site, the handful of rules worth keeping, and the cases where your server never reads the file at all.