How do I technically prove that WordPress is secure?

One of my clients forces me to do their project without WordPress. But WordPress is the best for his requirements.

What he said is, WordPress is unsecure because WordPress is open source and everyone knows the code. So hacking chance is higher than with a custom website. That is the only thing he does not like about WordPress.

How do I prove that WordPress is secure even code is open for everyone?

6 s
6

Tell your client to read up on cybersecurity, because his premise is nonsense. Security through obscurity has been discredited since 1851 (yes, that’s one and a half century ago). The opposite is also untrue. Open source software is not more secure than proprietary software.

The crucial thing in code security is not whether it’s open or not, but whether it’s well maintained. WordPress has an active community that is constantly alert on security matters. Follow the guidelines. Ask yourself how alert the authors of a rival cms are.

That said, security is a constant threat. There are no proofs or guarantees.

Leave a Comment