WordPress hardening and malware cleanup: which conversation do you need?

Preventive security work and responding to an already-compromised website solve different problems. Start by explaining what you have observed, what access is available and whether a problem is currently affecting visitors.

Hardening reduces opportunities for compromise

WordPress describes security as reducing risk rather than eliminating it. Its hardening guidance covers access, supported software, trusted extensions, backups and monitoring. The appropriate work depends on the website and its hosting environment.

A preventive engagement should identify the changes being made, how important functions will be tested, and who will maintain the controls afterward. A change is not useful if it breaks the forms or services your business depends on.

An existing incident needs its own scope

If you see unexplained redirects, unexpected content or unfamiliar administrative access, report those observations to the person investigating the site. Do not assume that a preventive settings package also includes investigating and removing an existing compromise.

Sanctus Solutions describes its WordPress hardening as preventive and distinguishes it from malware cleanup. Ask for a written explanation of which work fits your situation and which responsibilities belong to your host or another provider.

Questions for the first conversation

• Is the proposed work preventive, an investigation, cleanup, or a combination?
• What information and access are needed, and how should they be shared?
• How will backups, changes and essential website functions be checked?
• What record of the work and remaining actions will I receive?
• Who handles updates, monitoring and future incidents after this engagement?

Keep account details out of public forms and article comments. Use the provider’s agreed secure process when access is necessary.

Read the source guidance

See the WordPress hardening handbook for platform guidance and Sanctus’s WordPress security service description for its stated scope. Confirm current terms directly before booking.

View the Sanctus Solutions business profile for services, project examples and contact options.