# So, then… Is WordPress Secure or Not? — Nestor Angulo de Ugarte

> No human-made software is ever perfect. Security in WordPress is built in layers — and how you organise them for your needs is what makes a site more or less secure.

Canonical: https://nestorangulo.pro/speaking/wordfest-jul-2021-wordpress-secure-or-not/

- Format: Conference Talk
- Event: [WordFest Live — July 2021](https://www.wordfest.live/2021/july/sessions/so-then-is-wordpress-secure-or-not/)
- Location: Online
- Date: 2021-07-23 (July 23, 2021)
- Language: English
- Speaker: [Nestor Angulo de Ugarte](https://nestorangulo.pro/about/)
- Themes: WordPress Security, Web Security, Security Awareness
- Video: [Watch video](https://www.dailymotion.com/video/x83dddx)
- Slides: [View slides (PDF)](https://assets.nestorangulo.pro/slides/wordfest-jul-2021-wordpress-secure-or-not-0df64736c3.pdf)

No human-made software is ever perfect — and that's the most honest starting point for any conversation about WordPress security. Acknowledging imperfection doesn't mean resigning yourself to being hacked; it means building a realistic defence instead of a false sense of safety.

Security in WordPress is built in layers. Core updates, plugin hygiene, access controls, hosting environment, monitoring — each is a layer. How you choose and organise them for your specific needs, audience, and risk tolerance is what determines whether your site is, in practice, more or less secure.

By the end of this session you have a working model to take home: one that replaces the yes/no debate with a clear, actionable framework.

[← All talks](https://nestorangulo.pro/speaking/)