Practical steps and architecture to protect WordPress from DDoS attacks, combining edge mitigation, managed WAF, origin hardening, and operational runbooks for HIPAA and SOC 2 environments. Includes checklist and support options with Armour Cloud.