RESOURCES

Everything we know about WordPress security, shared openly.

Research notes, practical guides, and vulnerability advisories from the analysts who run our audits.

Field notes from real audits, breach post-mortems, and commentary on the WordPress security landscape.

Practical, step-by-step guides for hardening WordPress core, plugins, hosting, and user access.

Tracked vulnerability disclosures for WordPress core, popular plugins, and themes as they're published.