Every WordPress.com site is encrypted and automatically installed with an SSL certificate. WordPress.com also runs firewalls and security testing and monitors suspicious activity. There is a dedicated security team if you need assistance.