Website, security, maintenance and updates

Website Security & Optimization Checklist Priority 1: Security User Accounts * Review all WordPress users. * Remove any inactive or unnecessary users. * Ensure every admin account belongs to a current employee. * Require strong passwords. * Enable two-factor authentication for all administrators. * Verify admin email addresses are correct. WordPress Core * Update WordPress to the latest version. * Verify automatic security updates are enabled. * Remove old WordPress installations or staging sites. Plugins * Update all plugins. * Delete unused plugins (don’t just deactivate them). * Remove plugins that have not been updated in 12+ months. * Review plugin permissions and necessity. Themes * Update active theme. * Delete unused themes except one default WordPress theme for backup. * Verify theme files have not been modified unexpectedly. Malware Scan * Install and run a full malware scan. * Review modified files. * Scan uploads directory for PHP files. * Check for suspicious cron jobs or scheduled tasks. Recommended tools: * Wordfence Security * Sucuri SiteCheck ⸻ Priority 2: SEO Cleanup Because the hackers created spam content, Google may have indexed it. Google Search Console * Verify ownership. * Check Security Issues report. * Check Manual Actions report. * Review indexed pages. * Submit updated sitemap. * Request reindexing of key pages. Spam Cleanup * Search Google for:url * Identify any remaining spam URLs. * Remove spam posts/pages. * Redirect deleted spam URLs if necessary. * Resubmit sitemap. ⸻ Priority 3: Site Performance & Optimization Technical * Install caching solution. * Compress images. * Remove unused plugins. * Review mobile page speed. * Fix broken links. Content * Review all blog posts for accuracy. * Update old content. * Add internal links between service pages. * Verify contact forms work correctly. * Test all call-to-action buttons. Local SEO For company * Verify Google Business Profile information. * Ensure phone numbers match everywhere. * Ensure NAP (Name, Address, Phone) consistency. * Add FAQ schema. * Add service area pages if appropriate. ⸻ Priority 4: Healthcare Business Compliance Review * Verify all contact forms are functioning. * Verify form submissions are being received. * Review website backups. * Confirm SSL certificate is active. * Ensure website traffic is encrypted (HTTPS). * Review privacy policy. * Verify no applicant or client information was