1. All the poseurs who read articles such as this and then start selling WordPress security services. We get many jobs from people who got hacked after they’ve paid a “so called” expert lots of money.

2. It seems like most WordPress users who earn income from their sites can’t understand, or don’t want to believe that they need more than just basic protection. Then “after” their site has been attacked by a skilled hacker they call us… whining and sometimes begging to get the mess cleaned up and their site protected right away.

Our company mission is to stop hackers “before” they do damage, and it’s clear this was your goal too. Adding those “words of caution” you mentioned can turn a good post like this into an excellent one.

thanks for taking your time and updating our readers about the same. Well, I can surely know that being a security expert you are in a better position than me to say that the title is misleading but think from this point of view that for doing the same work, there are “so called” security professionals who’ll charge their clients some $400-$500. Now, if a post that’ll save someone 500 dollars then I won’t think that this will mislead the people.

I think i should include “words of caution” that by any means these are not the only solution just like you’ve mentioned in the comment. Thanks for making me realize this much… of course, the idea was not to mislead anyone, i’m sure someone who is making money will just not settle for something like this… they’d consult a security professional.

Your title however; is very misleading, as these basic steps are not “WordPress Security Service for free.”

The danger is that people will do these things and think their site is safe, when in fact it is still only partially protected.

Slowing down “stupid hack scripts” used by script-kiddies is about all these tips can do… and that may be okay for casual WP users.

But if you use your site to make money or represent your company, you probably can’t afford the downtime, loss of income, and possible public embarrassment of being hacked. These basics are like turning on your home burglar alarm system but leaving a window open on a floor without a motion detector.

Most of our business comes from repairing hacked WP sites, and almost all of the owners had done some or all of these things.

So please be reasonable with your post titles. We don’t mind getting more work, but it’s not fair to lead someone into a false sense of security.