7 Steps to Secure a WordPress Site Many companies operate under the assumption that their WordPress sites are secure -- and that couldn't be anything further from the truth. 1 of 8 Image Source: Adobe Stock: Prima91 WordPress sites account for more than one-third of all websites on the Internet, including some of the most highly trafficked sites and numerous e-commerce sites. So it stands to reason that companies would spend a lot of time and resources on protecting site security, right? Unfortunately, says Ted Harrington, executive partner at Independent Security Evaluators (ISE), too many organizations believe that because WordPress runs on open source, it's innately secure.