WordPress Security Headers Without a Plugin: HSTS, CSP and Friends
Excerpt: Six HTTP headers give your site most of its browser-level protection — and none of them needs a plugin. What each does, and the exact config to add.
Read article
Category
Security
Articles on “Security”: practical fixes, principles and things worth checking before you ship.
4
articles in this category
Articles in this category
Back to all articlesWordPress Hardening Checklist: 12 Fixes That Take an Afternoon
No security suite required: 12 concrete hardening fixes — from XML-RPC and user enumeration to file permissions — you can finish in one afternoon.
Read articleHTTPS Done Right: Certificates, Redirects and Mixed Content
"We have SSL" isn't the same as "HTTPS done right." Fix redirects, hunt down mixed content in the database, and finish with HSTS —…
Read articleWhy Fewer Plugins Means Fewer Hacks: Maintenance That Actually Protects
Security products love complexity. The data says the opposite works: fewer plugins, disciplined updates, tested backups. Here's the routine, by the numbers.
Read article