This document discusses WordPress security and provides tips for securing a WordPress site. It notes that many sites have been hacked and outlines risks like exploiting outdated software, passwords, and plugins. The document recommends controlling resources, maximizing profits, securing passwords, automating updates, monitoring the site, using multiple security tools, and avoiding deserialization to prevent hacking. It aims to help users understand security threats and best practices to secure their WordPress site.

1. WordPress Security
Know your enemy
Robert Rowley
Head of Security

2. IntroductionIntroduction

3. Who Here
Has Been
Hacked?
Who Here
Has Been
Hacked?

4. Understanding Risk

5. Targets

6. There Are
No Targets
There Are
No Targets

7. Game of
Numbers

8. Controlling Resources

9. Maximizing Proft

10. Brute Forcing
Passwords

11. Securing
Passwords

12. Exploiting
Outdated Software

13. Updates
&&
Automation

14. Do Not Forget
Your Plugins
Or Theme

15. Consider
Becoming A
WordPress
Purist

16. Monitoring

17. No Single Tool
Does Every Job
No Single Tool
Does Every Job

18. Misconceptions

19. Some
(Scary)
Stories...
Some
(Scary)
Stories...

20. unserialize()unserialize()

21. unserialize()unserialize()

22. unserialize()unserialize()

23. unserialize()unserialize()

24. SummarySummary

25. Questions?

26. FIN
Email: Robert.Rowley@pagely.com