WordPress and Cloudflare Security Engagement

What this case study is based on

Completed Upwork engagement supplied by Xequent. Only what the project record actually shows is stated here. Where no measurable outcome was recorded, none is claimed.

The security problem

• The project brief combined WordPress security and Cloudflare security rather than treating them as separate layers.
• The security architecture therefore needed to consider both the application and the network edge.
• The work required clear communication and a solution-oriented approach.

Technical approach

The specific controls follow from the site's architecture and its observed traffic, never from a template. The workflow below is the reasoning behind the work, described at the level the project record supports.

1. Start with the WordPress application layer: core, plugins, themes, accounts, authentication and exposed functionality.
2. Review the Cloudflare layer for DNS, TLS, WAF and traffic-control opportunities.
3. Separate detection from remediation so a security scan is not presented as a cleanup.
4. Document the changes so future maintenance can follow the same security baseline.

Result and client evidence

• The Upwork record shows a 5.0/5 rating and client feedback describing the freelancer as one of the most trustworthy freelancers the client had worked with.
• The client also endorsed Committed to Quality, Solution Oriented and Clear Communicator.

Detection and remediation are different jobs

A scan tells you what is recognisable. It does not establish how far an attacker moved, remove the persistence mechanisms left behind, or close the path they came in through. That is why a scan result is where an engagement starts, not where it ends.

On a compromised site the sequence that works is preserve evidence, contain, investigate, clean files and database, hunt persistence, then find the entry point. Skipping that last step is why sites get reinfected within a week of a cleanup that looked complete. The malware removal service covers the full sequence, and hardening is what changes the outcome next time.