We do all what we can. Security is a complex topic, and usually more security means less user friendliness of the user interface. Some of the features we have implemented are: Using industry standard best practices and software Keep our system Up To Date with latest versions and patches of all used plugins Brute Force attack protection and mitigation using on of the industry leading 3rd party services, including blacklists of known malicious actors Spam protection using using on of the industry leading 3rd party services Account lock out periods, where after specific unsuccessful logins, account gets locked for extended period of time 2FA Reporting and alerting