WordPress

Security

• Keep core, plugins and themes up to date. Core is automated out of the box, for plugins and themes consider wp-cli or a web host that does this for you.
• Two-factor authentication
• Block repeated failed login attempts at firewall level

Tools

• wp-cli
• Varying Vagrant Vagrants - Open source Vagrant configuration for contributing to WordPress.