On: HTTP Security headers you should be using

[michaelmcmillan]

The directory entries at http://ibuildings.nl/robots.txt suggest that they're hosting much more than a blog on that domain.

Edit: As others pointed it out, it's a Drupal installation. Trusting Drupal to be 100% safe in regards to malicious attacks is not a good idea. I know this is nitpicking, it is however still ironic.

http://www.cvedetails.com/vulnerability-list/vendor_id-1367/...

[yeukhon → michaelmcmillan]

It's a drupal-powered site. It's no different from WP though IMO.