Security at WordPush

We take the security of your data seriously. Here’s how we protect your information.

Security Overview

WordPush is built with security as a core principle. We use industry-standard practices to protect your data, your WordPress credentials, and your content.

Encryption

All data is encrypted in transit using TLS 1.3
Sensitive data is encrypted at rest using AES-256
WordPress application passwords are stored using industry-standard encryption

Authentication

Secure email-based authentication
Session management with automatic expiry
No passwords stored – we use secure token-based authentication

Permissions

WordPush only requests the minimum permissions needed to function:

WordPress: Post creation and editing only
LinkedIn: Company and personal post creation
We never request admin-level access to your WordPress site

Infrastructure

Hosted on secure, SOC 2 compliant infrastructure
Regular security updates and patching
Automated backups with point-in-time recovery
DDoS protection and rate limiting

Vulnerability Reporting

We welcome responsible security research. If you discover a vulnerability, please report it to:

security@wordpush.co.uk

We commit to acknowledging reports within 48 hours and providing an initial assessment within 7 days.