WordPress hardening

September 10, 2026

XML-RPC in WordPress: what it is, why bots love it, and when you can disable it safely

If you’ve ever run a WordPress security scan and seen a warning about XML-RPC, you’re not alone. A lot of small business...Read More...

File permissions on WordPress: when 775 quietly becomes a backdoor

You can do alot of WordPress security stuff right. Strong password. Updates done. Two-factor on. And still get burned by something boring...Read More...

wp-config.php hardening: the 5 constants most owners never set

If you run a WordPress site for your business, there’s a decent chance you’ve never opened wp-config.php. Totally normal. Most owners shouldn’t...Read More...