Thu, 16 Apr 2026 14:39:18 +0000
wordpress, security, selfhosting, webdev

Security plugins are some of the heaviest in WordPress.

Wordfence, Sucuri, iThemes Security — they all add significant overhead to every request.

Meanwhile, server-level security (WAF, fail2ban, proper SSH config) costs zero page load time.