25 WordPress Backup and Security Tasks You Can Outsource to WordPress Support Services

1. Install a WordPress backup plugin like BackupBuddy to start running automatic WordPress backups
2. Confirm your automatic WordPress backups are running at scheduled intervals
3. Confirm backups are delivering to a safe, off-site storage destination & set up redundant backups (two or more backup file storage locations)
4. Confirm backup files include WordPress database and all files (media library, themes, plugins, etc.)
5. Consider using Stash Live (real-time WordPress backups) if you manage a more active site
6. Delete any old locally-stored backups (these are backups stored on your own server)
7. Delete old backup files stored off-site in BackupBuddy Stash to reduce storage usage
8. Keep a current version of the script file on hand

9. Update WordPress core to latest version
10. Use a WordPress security plugin like Wordfence to help perform important WordPress security tasks
11. Run the WordPress Security Check feature to activate recommended WordPress Security features
12. Enable 404 Detection because of phishing and other attempts
13. Enable the Banned Users setting to block specific IP addresses and user agents from accessing your site
14. Review logs of Banned User IPs
15. Enable WordPress brute force protection to protect your site against attackers that try to randomly guess login details to your site
16. Enable Network Brute Force Protection to protect your site against known attackers before they reach your site
17. Run a WordPress Malware Scan
18. Enable User Logging to log user actions such as login, editing or saving content and other actions
19. Disable the File Editor in WordPress Tweaks
20. Harden WordPress by using the Away Mode setting to limit access to your WordPress login and admin area (for example, overnight or while you’re on vacation)
21. Whitelist your own IP Address
22. Review WordPress file permissions
23. Remove the Admin user
24. Change WordPress salts & secret keys
25. Activate and set up WordPress two-factor authentication

Best WordPress support services for backup and security tasks? Here are the most reputable: