If a security concern appears, acting quickly matters, but recording what happened also matters so the same pattern is not repeated.

A site can function well today and still become fragile over time without any dramatic visible event. Old plugins, abandoned themes, doubtful backups, inflated media libraries, badly managed permissions, or small errors…