Why I Replaced WordPress with Hugo: An Enterprise Security Engineer's Shift to Static Publishing

🏛️ The Cognitive Dissonance of a Security Engineer on WordPress For over two decades, I have engineered, hardened, and defended high-stakes enterprise infrastructure—from managing threat detection and clinical telemetry in regulated healthcare environments to architecting Zero Trust access models protecting tens of thousands of personnel and cloud assets across Amazon Web Services (AWS). My entire professional philosophy centers on fundamental security axioms: Minimize the attack surface to the absolute bare essentials. Eliminate ambient authority and enforce least privilege. Decouple critical dependencies and favor deterministic, auditable architectures. Shift security verification left into automated CI/CD quality gates. Yet for years, my personal technical writing lived on a standard WordPress instance. ...

October 22, 2026 · 11 min · 2144 words · Joshua Wortz