Mentality Dictionary
Defense in depth
Definition
Defense in depth stacks multiple controls so one missed update or weak password is less likely to end in disaster.
Also called: defence in depth, layered security
Why it matters for WordPress
There is no single “secure plugin” checkbox. Updates, backups, 2FA, a WAF, monitoring, and least privilege each catch different failures. Layers turn brittle security into resilient operations.
How it shows up in practice
- Password theft blocked by 2FA
- Exploit probe blocked by a WAF while you patch
- Malware caught by a scanner because logging showed odd admin activity first
What to do
- Pick a small stack you will actually maintain.
- Prefer boring controls that work together over one exotic gadget.
- Test restores; an untested backup is not a layer.
- Review the stack yearly as the site and team change.
Related terms
Nearby ideas in the dictionary
- Security theater Security theater is activity that feels protective but does not meaningfully reduce real risk.
- Assume breach Assume breach means designing as if an attacker may already have a foothold, so detection and recovery matter as much as prevention.
- Security hardening Hardening is the set of configuration and process changes that make a site harder to abuse.