There are many myths and misconceptions about the security of WordPress websites. Much of this is down to two reasons; one being the very old fashioned idea that WordPress is only a blogging platform, when it is in fact fully realised and scalable CMS. The second reason is that as the market leading CMS, with over 60% market share, we hear more about security breaches on WordPress sites, because there are so many more WordPress sites than anything else.
We approach security very methodically, as it is a bit of an obsession for us. As well as managing and testing updates to WordPress and plugins, we use Sucuri’s firewall and website security platform, to monitor and protect the sites we look after.