Security requirements for all sites hosted on web.unbridled.com server
- SSL installed and https:// redirect established
- Public_html folder includes a .htaccess file containing the command Options -Indexes
- No .sql files stored in the public_html folder
- No WP backups stored in any public_html path. (Instead, use AWS S3 for archiving.)
- No inactive WP sites in cPanel. (Dev sites are ok.)
- All WP installs using a Login ReCAPTCHA plugin.
- All WP installs using Wordfence.
- All WP installs added to Main WP dashboard.
- All WP installs undergoing regularly scheduled maintenance. (All plugins, themes, or core files updated within last month.)
- No WP install with a generic username (e.g., admin).
- All WP installs using PHP5.6 or higher.
- All WP, database, and ssh passwords saved to LastPass.
Regular Server (webappsseccure.unbridled.com)
- Any site not meeting the criteria above must be hosted on our regular server: WebAppsSeccure.unbridledsolutions.com