WordPress Guides
Plain-language guides on WordPress maintenance, speed, and security, written the way we'd explain it to a client, not a search engine.
Core Web Vitals for WordPress: LCP, INP and CLS
Core Web Vitals are three separate measurements, loading, interactivity and visual stability, and a WordPress site can fail any one of them…
How Do You Check If Your Website Is Secure?
There is no single test that confirms a website is secure. A green padlock, a clean blacklist result and a passing Google…
How Do I Know If My WordPress Site Is Hacked?
Something about the site looks off: a warning in search, an email from the host, or a visitor who landed somewhere strange.…
WordPress Update Management: Core, Theme and Plugin Updates Done Safely
WordPress core, themes and plugins each update on their own schedule, and WordPress ships a built-in auto-update toggle for all three. Core…
Cyber Essentials Security Update Management: Does the 14-Day Rule Cover Your WordPress Site
Cyber Essentials requires every in-scope device to run software that is kept up to date, and it names commercial off-the-shelf applications and…
Do Websites Really Need Monthly Maintenance?
A website that launches clean does not stay in that state, because WordPress core, the theme and every active plugin are each…
How to Choose a WordPress Maintenance Company
Every established WordPress maintenance company says the same five things. This guide turns the pitch into five checkable criteria, explains the mechanism…
Cyber Essentials Malware Protection for Your Website
Cyber Essentials asks every applicant to name their in-scope devices and show a malware protection mechanism on each one. The requirements document…
WordPress PCI Compliance: What Applies to Your Payment Page
Your checkout runs on WordPress, with card fields from Stripe or WooPayments, and once a year you complete a self-assessment questionnaire rather…
WordPress Security Hardening: What It Is and What It Actually Covers
You have a security plugin installed, updates mostly happen, and the site has never been hacked. That is a reasonable place to…
How Often Should a WordPress Site Be Updated?
A WordPress site runs core, a theme, and a handful of plugins, each on its own release schedule. WordPress only auto-applies a…
How Much Does WordPress Maintenance Cost?
You are comparing WordPress maintenance quotes and the numbers run from five dollars a month to five hundred. Two plans at the…
What Are the Security Risks of WordPress?
"WordPress is insecure" gets said a lot, and it is not quite the right claim. Nearly every disclosed WordPress vulnerability lives in…
Why Is My WordPress Site So Slow?
Your WordPress site takes forever to load, and you have already tried the obvious fixes. A slow site is almost never one…
How to Speed Up a WordPress Site
A slow WordPress site turns up under a search for "how to speed up wordpress" as a dozen unrelated tactics, with no…
The WordPress Maintenance Checklist
This is the checklist for what a WordPress site actually needs on a recurring basis: core, plugin and theme updates tested before…
What Is a WordPress Care Plan?
A live WordPress site needs someone keeping it running, and "WordPress care plan" shows up in every search for that help. Providers…
Is WordPress Secure? The Honest Answer
WordPress powers a huge share of the internet. That scale is why "WordPress security" gets so much conflicting advice. Some of it…