Is it possible to find out if a site has good or not hack protection?

Question

Burglary protection

Hi all. How can you find out if a site has good protection against hacks or if it leaves much to be desired? Mb, even someone can simply evaluate the sites of interest to me (I don’t ask you to hack, I’m just interested to know how you evaluate and what you say about these sites)?

Answer 1

https://geekflare.com/online-scan-website-security...

Answer 2

conduct an audit

Answer 3

Were any precautions taken?
One of the vulnerabilities in the xmlrpc.php VI I
recommend installing the Clearfy & Wordfence plugins. Clearfy is paid only. They improve the security of the airspace. Well, do not install left plugins and themes from dlwordpress sites, etc. If anything, check functions.php and PHP plugin files for "extra" lines.

Answer 4

The question is very abstract.
In my opinion, rating the protection of a web application, servers, and infrastructure as a whole as "good" or "bad" is rather pointless.
First of all, you need to set a goal, why do you need this information? I dare say in advance that each object from your targets contains at least 1 vulnerability. There is no ideal system in principle. It is explained by the number of attack vectors, the frequency of updating critical vulnerabilities, and the key point is the human factor. Even in an ideal system from a technical and architectural point of view, there is a person present. How can people make mistakes. Real examples, statics can be easily found in the public domain, the "Social Engineering" attack vector.
Scanners that offered to assess the security of the system are not able to cope. It must be clearly understood that any scanner is automation, any automation is nothing more than a tool. In experienced hands, the tool will facilitate the work, I don’t really understand the point of using it without a theoretical and practical understanding of the processes being performed. In other words, the "monkey with a grenade" analogy.
I can only assume that these tools only disorientate with their false positive results, and in general, reports also need to be able to be perceived on the merits.
Leave a communication channel, perhaps I will do an initial audit / reconnaissance. But it is not exactly)

Answer 5

Conduct an audit