{"id":16367,"date":"2022-10-11T14:50:20","date_gmt":"2022-10-11T14:50:20","guid":{"rendered":"https:\/\/newblog.siteground.com\/en\/?p=16367"},"modified":"2026-05-13T13:44:59","modified_gmt":"2026-05-13T13:44:59","slug":"build-in-security-from-day-1-to-prevent-website-hacks","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/build-in-security-from-day-1-to-prevent-website-hacks\/","title":{"rendered":"Build in Security from Day 1 to Prevent Website Hacks"},"content":{"rendered":"\n<p>Website security should be on the mind of every site owner. It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you need to keep it safe and secure. As a site owner myself \u2013 and primarily a WordPress site owner \u2013 I\u2019ve come up with a checklist I go through every time I spin up a new website for myself or a client. Let me share it with you in hopes that you will pick up a few new ideas. Let\u2019s look at what it takes to <a href=\"https:\/\/www.siteground.com\/academy\/how-to-secure-a-website\/\">secure a website<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-choosing-a-secure-web-host\"><span class=\"ez-toc-section\" id=\"choosing-a-secure-web-host\"><\/span>Choosing A Secure Web Host<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>It should go without saying, but security starts with your <a href=\"https:\/\/www.siteground.com\/web-hosting.htm\">web hosting company<\/a>. I\u2019ve used everything from \u2018do it yourself web hosting\u2019 to \u2018concierge level hosting\u2019. The trick is to find the level you need and the support you are comfortable with.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-check-their-support\">Check their support<\/h3>\n\n\n\n<p>The first thing I do when considering a new web host is to check their support and response time. I\u2019ll sign up for a free trial, put up a site, and then ping support to ask a question. How quickly they respond and how well they understand the question gives me clues as to what I can expect from them if I host with them.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-check-their-security-features\">Check their security features<\/h3>\n\n\n\n<p>I\u2019ll then check their website and hosting plans to see what security tools and features they provide. I\u2019ll look for essential things like an <strong>SSL certificate<\/strong> to encrypt and protect my website data, <strong>domain privacy<\/strong> to hide my personal information from public Whois databases, <strong>2-factor authentication<\/strong> to protect my website from unauthorized access, <strong>geographically distributed backups<\/strong> to have a safe copy of my website in case something goes wrong.<\/p>\n\n\n\n<p>Other key security measures I\u2019d like my website hosting provider to have in place is a <strong>Web Application Firewall<\/strong> &#8211; software that sits in front of my website and protects it from known bad traffic &#8211; to keep my host server safe from software exploits, <strong>DDOS and brute-force attacks protection<\/strong>, and the option for <strong>automatic updates to the latest PHP and WordPress versions<\/strong> to keep your site secure from malware.<\/p>\n\n\n\n<p><br>If the host provides yet more security tools, that would be even better. For example, on top of all these features, available on <a rel=\"noreferrer noopener\" href=\"https:\/\/www.siteground.com\/technology\" target=\"_blank\"><strong>the SiteGround platform<\/strong><\/a>, they also offer an in-house developed <a href=\"https:\/\/newblog.siteground.com\/en\/siteground-launches-new-site-scanner-plans\/\" data-type=\"post\" data-id=\"15870\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Site Scanner service<\/strong><\/a> and a free in-house built <a rel=\"noreferrer noopener\" href=\"https:\/\/www.siteground.com\/wordpress-plugins\/siteground-security\" target=\"_blank\"><strong>SiteGround WordPress Security plugin<\/strong><\/a> to make sure that your website would be as secure as possible.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-check-their-blog\">Check their blog<\/h3>\n\n\n\n<p>Step 3 when selecting a web host is always to read the last 5 entries in their blog.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Are they recent?<\/li>\n\n\n\n<li>Do they talk about security?<\/li>\n\n\n\n<li>Do the blog posts seem helpful?<\/li>\n<\/ul>\n\n\n\n<p>No, not all blog posts are going to be about security, but I\u2019d better be able to find a recent one. The Security landscape changes quickly so they need to be posting regularly.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-check-their-price\">Check their price<\/h3>\n\n\n\n<p>Finally, I check their pricing tiers and figure out where my site will fall. Price is the last thing I check because if the first two boxes aren\u2019t checked then the price doesn\u2019t matter. They could be giving it away for free and I wouldn\u2019t use them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-build-your-site-securely-from-the-beginning\"><span class=\"ez-toc-section\" id=\"build-your-site-securely-from-the-beginning\"><\/span>Build Your Site Securely From The Beginning<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Once you\u2019ve laid a secure foundation for your website, it\u2019s time to start framing it and building it out. At every step, you need to make sure that security is \u201cbaked in\u201d not \u201cbolted on\u201d.<\/p>\n\n\n\n<p>Security is baked in when you think about it before you<a href=\"https:\/\/www.siteground.com\/kb\/make-wordpress-website\"> start building your website<\/a>.\u00a0<\/p>\n\n\n\n<p>Security is bolted on when you build out your entire website and then decide to just add a security-focused plugin to cover your bases.<\/p>\n\n\n\n<p>Baked in is <strong>always <\/strong>better.<\/p>\n\n\n\n<p>What does it mean to bake in security?<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-install-an-ssl-certificate-as-soon-as-you-get-the-website-set-up\">Install an SSL certificate as soon as you get the website set up<\/h3>\n\n\n\n<p>Don\u2019t wait until you are ready to deploy your website before you remember to install your SSL certificate. These days a secure website is just a few clicks away. Take the time to do it now and then make sure you force all traffic to be https after it is installed. For those users hosting with SiteGround, your Site Tools makes setting up and enforcing SSL easy. Just a few clicks and you are in business.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-set-a-strong-password-policy-before-you-start-adding-users\">Set a strong password policy before you start adding users<\/h3>\n\n\n\n<p>Passwords are the lock on the front door to your site. When building out your site, put a strong lock on the front door by requiring all users to use strong passwords. Doing this before you let users start coming into your site will make sure that no users set up weak passwords.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-require-two-factor-authentication-2fa-for-any-user-that-will-have-admin-level-rights-in-the-system\">Require Two-Factor Authentication (2FA) for any user that will have admin-level rights in the system.<\/h3>\n\n\n\n<p>Two Factor Authentication is the deadbolt on the inner office of your site. Yes, a strong password is important for anyone to get into the site, but to get to things like financial information or user management, you want a strong deadbolt as well. Keep your system secure by implementing 2FA for all your admins. The <a rel=\"noreferrer noopener\" href=\"https:\/\/www.siteground.com\/wordpress-plugins\/siteground-security\" target=\"_blank\">SiteGround Security plugin<\/a> makes setting up 2FA very easy.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-set-up-a-backup-system-that-will-regularly-backup-your-entire-website-and-store-those-backups-securely\">Set up a backup system that will regularly backup your entire website and store those backups securely.<\/h3>\n\n\n\n<p>You need a 30-day backup system implemented from day 1. Not 1 day, not 7 days, 30 days. The reason is, that if your site gets hacked, you may not notice immediately. Once you do notice, you want to clean your site and one of the best ways to do that is to restore your site from a clean backup.&nbsp;<\/p>\n\n\n\n<p>SiteGround\u2019s Site Tools provides an intuitive tool for scheduling nightly backups and restoring from them when needed.&nbsp;<\/p>\n\n\n\n<p>While we are talking about backups. Don\u2019t forget to force a backup before any upgrade, major site redesign, or installing a new plugin. It never hurts to have a fresh backup in case things go bad.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-adhere-to-the-principle-of-least-privilege\"><span class=\"ez-toc-section\" id=\"adhere-to-the-principle-of-least-privilege\"><\/span>Adhere To The Principle Of Least Privilege<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Before you start letting users into your system, think about the roles that they will play. A role is a set of permissions or privileges and you want to give each user the absolute minimum level of privilege they need to use your site.<\/p>\n\n\n\n<p>There are several good role editors for WordPress and I suggest you install one, learn how to use it, and then audit the roles you have in your site to make sure they have only those privileges they need to use your site.&nbsp;<\/p>\n\n\n\n<p>On a regular basis &#8211; at the very least once a year &#8211; review these privileges to make sure they are still valid and to make sure that no role has been granted a privilege it does not need.&nbsp;<\/p>\n\n\n\n<p>Most users are not trying to do bad things, but we have to assume they would if they could. Adhering to the Principle of Least Privilege will help make sure that bad actors, or curious users, can\u2019t do things to your site they aren\u2019t supposed to.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-only-use-software-from-a-trusted-source\"><span class=\"ez-toc-section\" id=\"only-use-software-from-a-trusted-source\"><\/span>Only Use Software From A Trusted Source<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>In software development &#8211; as in building a house &#8211; your supplier\u2019s reputation is critical to your project\u2019s success. If you use a cut-rate supplier for the framing materials of your house, the entire project will suffer. Worse yet, it will cost you more later on to fix these problems than it would to just buy good materials to begin with.<\/p>\n\n\n\n<p>Building your website with quality materials like plugins and themes from reputable vendors will usually cost you money in the short run. However, knowing that you have companies standing behind their products and updating them when issues arise is worth the money.<\/p>\n\n\n\n<p>Yes, you can choose a free plugin or theme to build a critical feature of your website. However, what do you do if you discover that there is a security flaw? Worse yet, what do you do when you discover that flaw and then discover that the author has abandoned the project? At that point you have 2 options, neither good.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Hire a developer to fix the security flaw<\/li>\n\n\n\n<li>Rip out the plugin, find another one that does the same thing, implement it and make any changes to your process that are necessary.<\/li>\n<\/ol>\n\n\n\n<p>Both of these can be expensive propositions that could be avoided by simply choosing wisely in the beginning.<\/p>\n\n\n\n<p>SiteGround recently looked at the data from a lot of compromised websites. What they found was that the majority of the compromised websites were compromised because they had unpatched plugins that had security flaws in them. Much of the time these were the free versions of paid plugins downloaded from untrustworthy sources. Only download plugins and themes from trusted sites like WordPress.org or vendors you trust.<\/p>\n\n\n\n<p>The WordPress plugin repo is a reputable source. WordPress.org has implemented a review process &#8211; both human and scanning software &#8211; to help filter out plugins that have potential security issues or otherwise violate WordPress policy.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-scan-your-site-regularly\"><span class=\"ez-toc-section\" id=\"scan-your-site-regularly\"><\/span>Scan Your Site Regularly<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Just like you build a security system into your house, you want to set up a security scanner for your website as soon as you build it. Security scanners look at your site both internally and externally to make sure that there are no known vulnerabilities. It will check your website for viruses as well. No security scanner is perfect, just like no home security system is perfect. But your website is more secure with one.<\/p>\n\n\n\n<p>A good scanner will look for things like cross-site scripting vulnerabilities among other things. These vulnerabilities can allow your site to be used in the attack of other sites or attacks on the end user themselves.<\/p>\n\n\n\n<p>SiteGround has a great scanning system available. I get regular emails from it telling me which sites it has scanned and either that they are all clear or that there is an issue I need to address\u2026immediately.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-beware-of-phishing-scams-related-to-your-site\"><span class=\"ez-toc-section\" id=\"beware-of-phishing-scams-related-to-your-site\"><\/span>Beware of Phishing Scams Related To Your Site<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Once you\u2019ve built a new house, you don\u2019t hand out keys to anyone who asks, even if they claim to have a good reason for wanting in. Similarly, you want to make sure that if you get an email that says it is from your site, you don\u2019t automatically click on the link.<\/p>\n\n\n\n<p>You should know every email your system is capable of sending. When you get one that you don\u2019t remember setting up, you need to investigate. Don\u2019t click, start looking at it. Check the headers, look at the exact URL any links go to. Most importantly, quarantine the email using your virus detection software.&nbsp;<\/p>\n\n\n\n<p>Unknown emails purporting to come from your site are just another way that bad actors try to get into your site. These phishing attacks come from servers that are not under your control, so you can\u2019t stop them. You can, however, be aware so that when you get them, you delete them. In almost all cases, if you don\u2019t click, the email itself can\u2019t do any damage.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-tools-i-regularly-use-to-bake-security-into-my-sites\"><span class=\"ez-toc-section\" id=\"tools-i-regularly-use-to-bake-security-into-my-sites\"><\/span>Tools I Regularly Use To Bake Security Into My Sites<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Keeping a WordPress website secure doesn\u2019t have to be a full-time job if you bake security into it from the beginning. To do this, there are a couple of tools I use on almost every WordPress website I have.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.siteground.com\/wordpress-plugins\/siteground-security\" target=\"_blank\" rel=\"noreferrer noopener\">SiteGround Security plugin<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.siteground.com\/wordpress-plugins\/siteground-optimizer\" target=\"_blank\" rel=\"noreferrer noopener\">SiteGround Optimizer plugin<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tools.siteground.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">SiteGround Site Tools<\/a><\/li>\n<\/ul>\n\n\n\n<p>The <a href=\"https:\/\/www.siteground.com\/wordpress-plugins\/siteground-security\" target=\"_blank\" rel=\"noreferrer noopener\">SiteGround Security Plugin<\/a> is the first plugin I install on any new website I spin up. I install it, I install an SSL certificate, and I configure everything to be secure before I do anything else. If I get this part right, everything else is easier.&nbsp;<\/p>\n\n\n\n<p>The SiteGround Optimizer plugin is a great way to make my site faster, but it is also where I check the \u201cHTTPS Enforce\u201d checkbox. This way all the traffic on my site goes over HTTPS even if it wasn\u2019t originally. Having an SSL certificate is important, enforcing it on all traffic is equally important.&nbsp;<\/p>\n\n\n\n<p>SiteGround\u2019s Site Tools have a lot of great options to make managing a website easy. The one tool I use in setting things up though is the Backup tool. After I get SiteGround Security and SiteGround Optimizer setup and configured, I have my foundation laid &#8211; I force a backup. This is my fallback in case I mess something up while building out my site.&nbsp;<\/p>\n\n\n\n<p>Then before I install each plugin or theme, I create a new one. I name these backups \u201cBEFORE \u201c + the plugin or theme name. This way I can roll back to any point in the process.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-wrap-up\"><span class=\"ez-toc-section\" id=\"wrap-up\"><\/span>Wrap Up<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>If you lay a secure foundation for your website and then think about security at every turn, then you can rest easy at night, knowing that your site is as secure as possible. No website, however, is bulletproof. Therefore, the last step is to build your Disaster Recovery plan. What steps do you take when your site has been hacked?<\/p>\n\n\n\n<p>The SiteGround Security plugin has a series of steps you can take just for that situation. It is not a complete disaster recovery plan but when you combine it with 30 days of backups, you are well on your way to having one.<\/p>\n\n\n\n\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"Website security should be on the mind of every site owner. It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you need to keep it safe and secure. As a site owner myself \u2013 and primarily a WordPress site owner \u2013 I\u2019ve come up with a&hellip;","protected":false},"author":81,"featured_media":16370,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,12,15],"tags":[],"class_list":["post-16367","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-insights","category-security","category-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Build in Security from Day 1 to Prevent Website Hacks - SiteGround Blog<\/title>\n<meta name=\"description\" content=\"It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you need to keep it safe and secure.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Build in Security from Day 1 to Prevent Website Hacks\" \/>\n<meta property=\"og:description\" content=\"Website security should be on the mind of every site owner. It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2022-10-11T14:50:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-13T13:44:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cal Evans\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cal Evans\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\"},\"author\":{\"name\":\"Cal Evans\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff\"},\"headline\":\"Build in Security from Day 1 to Prevent Website Hacks\",\"datePublished\":\"2022-10-11T14:50:20+00:00\",\"dateModified\":\"2026-05-13T13:44:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\"},\"wordCount\":2231,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg\",\"articleSection\":[\"Hosting Insights\",\"Security\",\"WordPress\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\",\"name\":\"Build in Security from Day 1 to Prevent Website Hacks - SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg\",\"datePublished\":\"2022-10-11T14:50:20+00:00\",\"dateModified\":\"2026-05-13T13:44:59+00:00\",\"description\":\"It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you need to keep it safe and secure.\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg\",\"width\":1200,\"height\":630,\"caption\":\"website hacks prevention\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Build in Security from Day 1 to Prevent Website Hacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff\",\"name\":\"Cal Evans\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g\",\"caption\":\"Cal Evans\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/calevans\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/calevans\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Build in Security from Day 1 to Prevent Website Hacks - SiteGround Blog","description":"It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you need to keep it safe and secure.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/","og_locale":"en_US","og_type":"article","og_title":"Build in Security from Day 1 to Prevent Website Hacks","og_description":"Website security should be on the mind of every site owner. It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you","og_url":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2022-10-11T14:50:20+00:00","article_modified_time":"2026-05-13T13:44:59+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg","type":"image\/jpeg"}],"author":"Cal Evans","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Cal Evans","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/"},"author":{"name":"Cal Evans","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff"},"headline":"Build in Security from Day 1 to Prevent Website Hacks","datePublished":"2022-10-11T14:50:20+00:00","dateModified":"2026-05-13T13:44:59+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/"},"wordCount":2231,"commentCount":0,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg","articleSection":["Hosting Insights","Security","WordPress"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/","url":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/","name":"Build in Security from Day 1 to Prevent Website Hacks - SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg","datePublished":"2022-10-11T14:50:20+00:00","dateModified":"2026-05-13T13:44:59+00:00","description":"It doesn\u2019t matter if your site is large or small \u2013 if it is important to your business, you need to keep it safe and secure.","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2022\/10\/Website_gets_hacked.jpg","width":1200,"height":630,"caption":"website hacks prevention"},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/build-in-security-from-day-1-to-prevent-website-hacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"Build in Security from Day 1 to Prevent Website Hacks"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff","name":"Cal Evans","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g","caption":"Cal Evans"},"sameAs":["https:\/\/www.linkedin.com\/in\/calevans\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/calevans\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/16367","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/81"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=16367"}],"version-history":[{"count":11,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/16367\/revisions"}],"predecessor-version":[{"id":24790,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/16367\/revisions\/24790"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media\/16370"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=16367"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=16367"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=16367"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}