What basic security checks should I run?

Start with strong account access, working SSL, updated website software, backups, and careful handling of admin credentials.

Checklist

Use strong, unique passwords and enable extra account protection where available.
Keep WordPress, themes, plugins, and scripts updated.
Confirm SSL is active on the website.
Keep backups before major changes.
Remove unused admin accounts, plugins, themes, and scripts.

When something looks wrong

Open a support ticket with the domain, affected page, and a screenshot of the warning or error.
Do not paste passwords, tokens, or private keys into the ticket.