How do you keep the website secure?

We keep software updated, follow secure coding practices, limit access to sensitive areas, use HTTPS, run a web application firewall, set file permissions properly, keep backups, monitor logs and carry out regular security audits. Every site sits behind Cloudflare.