Advice on Security Concerns for WordPress Site

[ChadC]

My company has a WordPress site (URL is learn.automationdirect.com) It is a very simple site and is currently under utilized. I would like to make some SEO improvements to it by activating comments and installing an SEO plugin like Yoast but, I am being help back by concerns about the sites security. Is there some sort of suggestion/advice you guys can point me to that will help get the site to a place where we are confident in it's security level, and I can move forward with optimizing it?

[billhartzer]

Chad,

The latest versions of WordPress do a pretty good job at fixing the holes in WordPress, so I would make sure that you always have the latest version. Also, take a look at the Wordfence plugin, as it is a security plugin that does a lot to stop the majority of the security issues involved. I recommend upgrading the plugin to the paid version, if possible.

As far as optimization goes, I recommend Yoast, as it does a great job of fixing basic SEO issues. However, I recommend adding custom title tags and meta description tags whenever possible.

[emirgulal]

I recommend it to better wp security plugin and yoast plugin. I'm using them.

[maestrosonrisas]

I have had a big attack to my wordpress site and the only pluggin that was hable to stop it was OSE Firewall

About seo plugin i have yoast premium that is payed, but free version is enought

[MichaelC-15022]

This:  http://moz.com/blog/the-definitive-guide-to-wordpress-security

[MichaelC-15022]

By the way, if your site has ANY visibility at all, you can expect an automated attack on the WP admin login maybe once an hour.  All day, every day.  So, if you leave your admin account active, and give it a password that's in the dictionary, you'll be seeing injection scripts in your home page and you'll be the proud assistant distributor of various pharma products within a month or two :-).

Right now, I'm seeing so many scripted attacks from China, I blocked all China IP addresses from my travel website.  I was seeing hundreds to thousands of attempts per day before that.