Insights

WordPress Security & Infrastructure Blog

Technical field notes from incident response and production hardening work. No generic templates, just practical approaches that survive real traffic.

February 19, 2026

Cloudflare WAF Rules That Actually Stop Real Attacks (Without Breaking Legit Users)

Practical Cloudflare WAF approach: baseline, managed rules, rate limiting, bot mitigation, bypass patterns, logging, and iterative tuning.

Cloudflare WAF WordPress Security

Read article ->

February 19, 2026

WordPress Hacked? My Incident Response Checklist (From Triage to Cleanup)

Practical incident response checklist: containment, evidence, triage, cleanup, recovery, hardening, and monitoring.

WordPress Security Incident Response Malware Cleanup

Read article ->