- Use HTTPS
- Add Web Application Firewall
- Add 2FA or MFA
- Regular automated backups
- Regular scanning
- Uptime monitoring alerts
- Disable directory indexing
- Regularly change passwords and API keys
- Check if there are any spam or unknown users
Curated list of WordPress security checklist, resources, tools and best practices
Curated list of WordPress security checklist, resources, tools and best practices