I review web applications, CMS installations, source code, plugins, server configuration, credentials handling, and traffic controls. Based on the findings, I can configure protective controls such as Cloudflare WAF rules, rate limiting, firewall settings, security headers, permissions, and patching workflows for WordPress, PHP applications, and Linux-based servers.