This week we measured:
1 Green dashboard, blank page
2 11 seconds, not 30 minutes
3 Version hiding that hides nothing
4 30 findings, 7 reported
5 Orders in another table
6 A restore that erases today
7 Four places malware hides
A plugin on a client's store says "Not tested with your version of WordPress."
Apply it, stage it, wait, or skip?
And who makes the call at your agency?
A free WordPress audit. No credit card.
Give it a domain and it runs 54 checks from the outside. No account or plugin needed to start. Connect the site and it runs 85, because the extra ones look at what no outsider can see.
A site can look fine to its owner and still sell pills to Google.
A useful malware scan checks four places: what crawlers are shown, the files, the database, and whatever is set up to bring it back.
Then it verifies each hit before accusing anything.
A database restore puts the site back to the moment of the backup.
It also removes every order, form entry and comment created since.
On a busy store that can cost more than the failure.
Why files and the database differ:
https://t.co/ndGGnSNm7n
We created 10 WooCommerce orders and counted them two ways.
The old posts-table query returned 10 rows. All draft. None were orders.
A monitor built on it reports a store with no sales while the store trades normally.
https://t.co/nzAp9W96BS
One pass of external checks across six of our own sites.
30 findings. 7 worth telling anyone about.
The other 23 were true and unchanged from last month. One site had nothing reportable at all.
https://t.co/LplAVBePpa
The most repeated hardening tip: remove the generator tag so nobody sees your WordPress version.
We measured from outside. The tag was gone, the version was still in the asset URLs, and scanners fingerprint core files anyway.
Protuno Super Agents are built to take a backup, run the updates, check the site still loads, and put it back if it breaks.
You read what happened instead of doing it.
Start with the free scan: 85 checks, no card. https://t.co/FiIMpYOfWZ
A week of posts, one idea: look on a day when nothing appears to be wrong.
The failures that cost agencies money don't announce themselves. A white screen returning 200. A policy at pct=5. Nothing crashed, nothing alerted.
Free scan, address only: https://t.co/FiIMpYOfWZ
Your client's site broke last week. You found out from them.
The full guide for WordPress agencies on how to catch it first, with a 2-min intro video inside. @Protunohq https://t.co/yK6Q3VKJE0
We went through 55 operational checks, one at a time.
All 55 can be detected automatically. Only 8 can be fixed unattended: reversible header and file changes. 31 need someone to approve. 16 need context the site doesn't contain.