Sat, 14 Jun 2025 11:15
Level: All
Track: Developer
Most WordPress users install a security plugin and assume they’re fully protected—but that’s only part of the story. In this session, we’ll explore what security really looks like across thousands of WordPress sites, based on real-world insights from the WPStaq hosting platform. You’ll learn the security configurations that actually work, from caching strategies to firewalls to CDN setups like Cloudflare and AWS CloudFront. We’ll bust myths, highlight common mistakes, and provide actionable tips that go beyond the plugin level.
Presentation goal & learning objectives
– Understand the difference between application-level and server-level security.
– Learn how to correctly configure firewalls to complement WordPress security plugins.
– Discover how caching helps with both performance and DDoS protection.
– See how CDNs like Cloudflare and AWS CloudFront can be configured securely and effectively.
– Get practical, real-world insights into how attackers exploit misconfigurations—and how to reduce them.
Presentation audience
This talk is ideal for WordPress developers, site owners, and technical marketers who manage WordPress sites, whether they use managed hosting or configure their own servers. Intermediate to advanced users will get the most from it, but beginners interested in stepping up their site’s security will benefit too.