👾 Protection plugins
Do you have any positive experience with integrating plugins aimed at protecting a website? We are talking about DDoS attacks, viruses, etc.
My current choice is limited to Fluent Auth as native, and it is really good, but there are gaps in protection, for example renaming of database, admin login page, virus protection and DDoS attacks.
I've tried a number of them. They all have the same basic flaw - an attacker can reach your site before a plugin can do anything to fight them off.
I use Cloudflare for DNS (it's free). Then I create WAF rules to prohibit anyone from getting to my wp-admin or other sensitive URLs, except for allowed IPs (mine).
You can also have rules to block countries (China, Russia, whatever), detect bots, issue challenges, etc. It's working well for me.
I still use FluentAuth with the Community and for some other reasons, but I basically want my protection at the edge before someone gets to my server.
This is a video showing what I'm doing. Perhaps it's not perfect, but no security is perfect.
William Beem thank you for your reply!