Knowledge Hub
Security & Protection Hub
Harden WordPress before someone else tests it for you — and protect the content you worked for. Bots, brute force, spam and scrapers, with fixes that hold.
19 guides
2 plugins behind it
Weekly updates
Start here
New to the topic? This path takes you from zero to confident.
Weekly WordPress vulnerability report: October 5 to 11, 2026
Read guide →
Weekly WordPress vulnerability report: September 28 to October 4, 2026
Read guide →
Catching zero-day SQL injection without a signature: how the Must-Have Security firewall and AI scanner work
Read guide →
How to Clean a Hacked WordPress Site: 3 Ways to Remove Malware
Read guide →
Blocking the file write: how Must-Have Security stops malware it has never seen
Read guide →
WordPress login beyond the password: 2FA, passkeys, magic links and social login compared
Read guide →
Must-Have Captcha vs reCAPTCHA: what happens to the leads a captcha blocks by mistake
Read guide →
Temporary admin access in WordPress, done the safe way
Read guide →
WordPress hotlink protection that does more than block right click
Read guide →The plugins behind this hub
Every guide here is written by the team building these — the advice is what we ship, not what we read.
Spam Protection
Must-Have Captcha
Your visitors never solve another traffic-light puzzle — and your inbox never sees another spam bot.
Content Protection
WPACP
Your photos and content are your work. WPACP makes them unstealable — invisibly.