Harden your WordPress site against brute force, SQL injection, and remote code execution using a layered approach: security plugins, Nginx rate limiting, file integrity monitoring, and database privilege restriction. Practical commands and configs included.