Open-source, lab-driven study notes for building, administering, hardening, and operating WordPress at scale — 28 modules across install, content, security, performance, and DevOps (CC BY 4.0).
-
Updated
Jul 24, 2026
Open-source, lab-driven study notes for building, administering, hardening, and operating WordPress at scale — 28 modules across install, content, security, performance, and DevOps (CC BY 4.0).
Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware — cloaking, backdoors, database injection — scores your security posture, and hardens safely. Free, open-source (AGPL-3.0).
wordpress security best practice
Advanced WordPress security plugin for HTTP Security Headers, CSP management, Smart CSP discovery, deep scanning, and WordPress hardening — developed by Ebrahim Shafiei (EbraSha).
Automated Secure Wordpress Deployer - JShielder + WPHardening
Provides Mattermost 5-10 integration for WordPress 5/6.
The security visibility layer for WordPress, providing activity logging, audit trails, threat detection, suspicious request monitoring, core file integrity, file forensics, quarantine management, custom login protection, and REST API hardening without requiring an external account or cloud service.
Official repo for WP Tailwatch (wptailwatch.com) - The mobile-first security & management plugin replacing 23+ tools with malware removal, threat detection, backups, alerts & monitoring. WP Plugin URL: http://wordpress.org/plugins/tailwatch
WordPress threat detection engine. 30 scanning modules, 158 signatures, recursive payload decoding, ML risk scoring, cross-file correlation, real-time watch mode, and SQLite evidence store. Built for security researchers and WordPress administrators.
Secure WordPress permissions & hardening tool for Linux servers.
WPFather - WordPress Vulnerability Scanner & Security Recon Tool with 16 Modules | Zero Config Single Binary
Audit and harden your wp-config.php in the browser: security and performance checks plus a fresh salt generator. Your credentials never leave your device.
Sanitized Wazuh detection content from an Ubuntu deployment: custom rules, decoders, IOC lists, active-response guidance, validation notes, and operator-safety guardrails.
Bulletproof Wordpress deployment automation based on Ansible & Composer
To associate your repository with the wordpress-hardening topic, visit your repo's landing page and select "manage topics."