Para sitios corporativos uso WP Engine, aunque no estén libres de DDoS puntuales.
Para proyectos personales uso una combinación de plugins, a poder ser con CloudFlare por encima:
- BruteProtect: stopping distributed brute force attacks
- Sucuri: security hardening
- WP Security Audit Log or Simple History: audit log
Not necessary if Sucuri is installed:
- WP Crontrol: WP-Cron system visualizer
Only necessary if we are not managing backups ourselves:
- UpdraftPlus: manual/scheduled backup and restore to S3, Dropbox, Google Drive, Rackspace, SFTP, email...
- Hyper Cache: super simple to setup, lightweight and fast performance cache