Hardening a WordPress Site: A Practical Checklist
Logins, the admin URL, XML-RPC, the REST API and CAPTCHA. What genuinely reduces risk on a WordPress site, and what is mostly security theater.
WordPress Bloat: Plugins, Themes and Page Builders
Plugin count is not the problem; what each one loads on every page is. How to find the ones actually costing you, and what page builders really add.
WordPress Database Performance
Autoloaded options, post revisions, transients and orphaned metadata: what actually makes a WordPress database slow, and how to fix each one.