WordPress
Security
- Keep core, plugins and themes up to date. Core is automated out of the box, for plugins and themes consider wp-cli or a web host that does this for you.
- Two-factor authentication
- Block repeated failed login attempts at firewall level