Website security continues to be a moving target as technology evolves and malicious attacks continue to evolve with it. While the website security best practices provided in this document are not all-inclusive, they form the core of what we consider to be a relatively-easy to implement set of website security policies that protect against most common attacks.