Audit WordPress setup, hosting, plugins, forms, integrations, tracking tools, and user access.
Identify HIPAA, privacy, and security gaps related to PHI handling, encryption, access control, backups, logging, and third-party vendors.
Assess risks involving CRMs, analytics tools, email platforms, payment tools, APIs, and form builders.
Review overall website security posture and identify vulnerabilities or misconfigurations.
Provide a concise audit report with findings, risk levels, and prioritized remediation steps.

Strong WordPress security and technical audit experience.
Hands-on HIPAA compliance experience for healthcare or regulated websites.
Knowledge of website privacy, consent management, data retention, and third-party risk.
Familiarity with OWASP, SSL/TLS, firewalls, malware scanning, backups, and least-privilege access.
Clear communication and documentation skills.

Freelance WordPress Consultant – Security, HIPAA Compliance

Key skills