+381 60 180 8855 Available for new projects Start a project

Automation & Integrations

Security & Email Deliverability Hardening

Closed the findings of an external security assessment and got website email authenticated, without adding plugins.

All projects
Client
US home-services brand
Type
Automation & Integrations
Scope
Cloudflare · WP Engine · CSP · DKIM · DMARC · mu-plugin
Automation & Integrations US home-services brand
  1. 01 Security assessment
  2. 02 Edge headers & CSP
  3. 03 DKIM + DMARC
  4. 04 Monitor reports

The project

About the project

An external security assessment flagged several issues on a busy WordPress site, and website emails were at risk of landing in spam. The fixes had to be careful, because live forms, HubSpot tracking and third-party scripts all depend on the same setup.

A Content Security Policy is now enforced at the edge, tuned after a 162-page sweep that also caught lazy-loaded scripts the crawl missed. HSTS, nosniff, Referrer-Policy and Permissions-Policy headers were added, REST API user exposure was closed, and wp-cron was locked down with an edge rule. A small mu-plugin DKIM-signs WordPress mail, and DMARC moved to quarantine with reports showing a 100% pass rate.

Key features

Private client work. The client’s name is kept confidential.

  • Content Security Policy enforced and tuned site-wide
  • HSTS and modern security headers
  • REST API user exposure and wp-cron locked down
  • DKIM signing for WordPress mail via mu-plugin
  • DMARC at quarantine with 100% pass in reports

Contact · usually replies in 0–4 hours

Send me your
Figma file.

Or your current website. I’ll tell you the best approach: custom theme, rebuild, migration, or just the fixes that matter.

Tell me about the project

    I only use your details to reply. See the privacy policy.

    Thanks, talk soon.

    Your message is in my inbox. I usually reply within a few hours.