Monitoring5 min read
How to monitor WordPress sites without alert fatigue
Monitor WordPress sites with signed agent requests, vulnerability checks and alerts grouped by severity. Lessons from building Fleet Sentinel.
- WordPress
- Monitoring
- Security
10 articles
#Security
Every article tagged Security, newest first. Search all articles
- Monitoring
Security4 min read
WordPress security hardening: a practical checklist for 2026
A practical WordPress security hardening checklist: updates, logins, wp-config settings, upload rules, headers and what to do after a hack.
- WordPress
- Security
- Hardening
Security7 min read
Cloudflare WAF rules for WordPress that block attacks, not customers
Use Cloudflare WAF rules WordPress sites can test safely, protect login and checkout paths, and avoid breaking webhooks, REST API traffic, or cron.
- WordPress
- Security
- Cloudflare
Security7 min read
Application passwords for safer WordPress integrations
Use WordPress application passwords for REST API integrations with least-privilege users, HTTPS, rotation, revocation, and practical audit checks.
- WordPress
- Security
- REST API
Monitoring8 min read
WordPress plugin vulnerability monitoring: from alert to fix
Use WordPress vulnerability monitoring to inventory plugins, match known flaws, triage risk, patch safely, and track closed or abandoned extensions.
- WordPress
- Security
- Monitoring
Security8 min read
WordPress plugin supply chain security: when the update itself is the attack
Use WordPress plugin supply chain security checks to verify updates, spot warning signs, stage releases, and respond fast to compromised code.
- WordPress
- Security
- Plugins
Security8 min read
WooCommerce card testing attacks: how to spot and stop them
Stop WooCommerce card testing by spotting failed-order spikes, enabling Store API limits, tuning gateway fraud controls, and adding edge challenges.
- WooCommerce
- Security
- Payment Gateway
Security7 min read
Secure WordPress REST API endpoints: permission callbacks that hold up
Review a WordPress REST API permission_callback, capability checks, nonces, argument schemas, output, logging, and rate limits for custom endpoints.
- WordPress
- Security
- REST API
Security8 min read
WordPress security headers: what to set and how to test them
Set WordPress security headers safely, test HSTS and CSP, avoid breaking WordPress, and verify every response with curl, DevTools, and Observatory.
- WordPress
- Security
- HTTP Headers