Security & Protection Hub
Harden WordPress before someone else tests it for you — and protect the content you worked for. Bots, brute force, spam and scrapers, with fixes that hold.
Start here
New to the topic? This path takes you from zero to confident.
Weekly WordPress vulnerability report: October 26 to November 1, 2026
Read guide →
Weekly WordPress vulnerability report: October 19 to 25, 2026
Read guide →
WPACP 1.0: your own watermark, lossless copies and a redesigned settings page
Read guide →
Weekly WordPress vulnerability report: October 12 to 18, 2026
Read guide →
WordPress supply chain attacks: how to catch a poisoned plugin update in the first minute
Read guide →
Weekly WordPress vulnerability report: October 5 to 11, 2026
Read guide →
Weekly WordPress vulnerability report: September 28 to October 4, 2026
Read guide →
Catching zero-day SQL injection without a signature: how the Must-Have Security firewall and AI scanner work
Read guide →
How to Clean a Hacked WordPress Site: 3 Ways to Remove Malware
Read guide →The plugins behind this hub
Every guide here is written by the team building these — the advice is what we ship, not what we read.

Must-Have Captcha
Your visitors never solve another traffic-light puzzle — and your inbox never sees another spam bot.

WPACP
Your photos and content are your work. WPACP makes them unstealable — invisibly.