Start With Access Control

• Review all FTP, SSH and control panel users.
• Remove accounts that are no longer needed.
• Enforce strong passwords and, where possible, two factor authentication.

Check Software Versions

Confirm that your PHP, CMS, themes and plugins are up to date. Old versions are one of the most common ways attackers gain access to sites.

Review File and Folder Permissions

Permissions that are too permissive can allow malicious scripts to be uploaded or executed. Follow your CMS and host recommendations for secure defaults.

Document Your Findings and Next Actions

Make a simple checklist of what you checked, issues discovered and the fixes you applied. Repeat the same audit every few months to keep your hosting environment healthy.