I Audited a Production WHM/cPanel Server. Here's What I Found (and How to Check Yours)

Last month I ran a security audit on a production WHM/cPanel server. It belonged to a web agency hosting a couple dozen client sites — WordPress, WooCommerce, the usual stack. The server had been running for years without anyone really looking at it. Sites were up, clients were happy, nobody touched