Overview
Security review before launch helps catch exposed admin paths, outdated plugins, weak passwords, missing SSL, and form issues before customers arrive.
When this helps
Use this article before launching a new site, ecommerce store, landing page, custom feature, or migrated WordPress build.
Recommended steps
- Confirm SSL is active and redirects are working.
- Review admin users and remove temporary accounts that are no longer needed.
- Update WordPress, themes, and plugins where appropriate.
- Test forms, checkout, and login pages over HTTPS.
- Confirm backups and monitoring are in place.
Information XMLA may need
- Launch URL
- Admin user list
- Plugin or theme update notes
- Backup method
- Security or compliance requirements
Next step
Ask XMLA for a pre-launch security review if the site handles payments, leads, memberships, or sensitive data.