Security by reduction
Most brochure sites do not need WordPress, PHP, CRM, upload handlers, or databases. Removing them reduces exploit surface and bot noise.
Shared brochure VPS rule
Static files only unless there is a documented reason.
- No old WP stacks
- No exposed .env files
- No vendor trees in public roots
- No abandoned PHP apps
- Private VPS for executable sites