WordPress hardening

September 10, 2026

What Is XML-RPC in WordPress and Should You Disable It? (xmlrpc.php Explained)

XML-RPC is an older way for apps to talk to your WordPress site, but bots use it too. Here's how to check whether you need it and how…

File permissions on WordPress: when 775 quietly becomes a backdoor

You can do alot of WordPress security stuff right. Strong password. Updates done. Two-factor on. And still get burned by something boring...Read More...

wp-config.php hardening: the 5 constants most owners never set

If you run a WordPress site for your business, there’s a decent chance you’ve never opened wp-config.php. Totally normal. Most owners shouldn’t...Read More...