Resource

WordPress Security Checklist

A practical checklist for public exposure, user safety, file risk, backups, and incident response.

Problem

Security reviews are easy to delay when the next step is unclear.

For: Site owners and agencies running a first-pass security review.

Workflow

What to review

What It Contains

Public checks, administrator review, file exposure review, backup readiness, and response planning.

How To Use It

Work through the checklist before updates, handoffs, launches, or incident response.

Download

Use this checklist without an email gate

Last updated 2026-09-14.