{"id":2445,"date":"2026-09-15T12:30:00","date_gmt":"2026-09-15T12:30:00","guid":{"rendered":"https:\/\/narhost.com\/blog\/?p=2445"},"modified":"2026-09-12T18:53:57","modified_gmt":"2026-09-12T18:53:57","slug":"web-sitesi-guvenligi-onlemleri","status":"publish","type":"post","link":"https:\/\/narhost.com\/blog\/web-sitesi-guvenligi-onlemleri\/","title":{"rendered":"Web Sitesi G\u00fcvenli\u011fi \u0130\u00e7in Hangi \u00d6nlemler Gerekli"},"content":{"rendered":"<div id=\"ai-ozet\" class=\"ai-box\">\n<p class=\"ai-box-title\">K\u0131saca \u00f6zet<\/p>\n<ul>\n<li>Web sitesi g\u00fcvenli\u011fi \u00f6nlemleri be\u015f ba\u015fl\u0131kta toplan\u0131r: g\u00fcncel yaz\u0131l\u0131m, g\u00fc\u00e7l\u00fc \u015fifre ve iki ad\u0131ml\u0131 do\u011frulama, SSL sertifikas\u0131, d\u00fczenli yedekleme ve sunucu d\u00fczeyinde otomatik tarama.<\/li>\n<li>Payla\u015f\u0131ml\u0131 hostingde sunucu d\u00fczeyindeki tarama, g\u00fcvenlik duvar\u0131 ve izolasyon bar\u0131nd\u0131rma sa\u011flay\u0131c\u0131s\u0131na aittir; sitenin kendi kodu ve \u015fifreleri her zaman site sahibinin sorumlulu\u011fundad\u0131r.<\/li>\n<li>\u00dccretsiz SSL sertifikas\u0131 hosting paketlerinde gelir; taray\u0131c\u0131 uyar\u0131s\u0131 vermemesi ve arama motoru g\u00fcveni i\u00e7in tek ba\u015f\u0131na yeterli de\u011fildir, di\u011fer \u00f6nlemlerle birlikte i\u015fe yarar.<\/li>\n<li>\u0130ki ad\u0131ml\u0131 do\u011frulama panel ve y\u00f6netici giri\u015flerinde a\u00e7\u0131k olmal\u0131d\u0131r; parola tek ba\u015f\u0131na \u00e7al\u0131nmaya kar\u015f\u0131 yeterli bir kilit de\u011fildir.<\/li>\n<li>VPS ve VDS hizmetlerinde \u00f6nlemlerin tamam\u0131 m\u00fc\u015fteriye aittir; bu \u00fcr\u00fcnler y\u00f6netimsizdir ve sunucu i\u00e7i g\u00fcvenlik hosting hesab\u0131ndaki gibi otomatik de\u011fildir.<\/li>\n<li>Tek bir \u00f6nlem yeterli olmaz; \u00f6nlemler \u00fcst \u00fcste bindi\u011finde bir katman\u0131n atlanmas\u0131 di\u011ferleri taraf\u0131ndan kar\u015f\u0131lan\u0131r.<\/li>\n<\/ul>\n<\/div>\n<p>Yeni bir site kurdu\u011funuzda ya da mevcut sitenizi g\u00f6zden ge\u00e7irirken akla gelen soru \u015fudur: web sitesi g\u00fcvenli\u011fi i\u00e7in \u00f6nlemler nelerdir ve hangisi \u00f6ncelikli? Cevap tek bir araca de\u011fil, birbirini tamamlayan birka\u00e7 katmana dayan\u0131r. Bu yaz\u0131da hangi \u00f6nlemin ne i\u015fe yarad\u0131\u011f\u0131n\u0131, payla\u015f\u0131ml\u0131 hosting ile VPS\/VDS aras\u0131nda sorumlulu\u011fun nas\u0131l de\u011fi\u015fti\u011fini ve hangi \u00f6nlemin ne zaman \u00f6ncelikli oldu\u011funu anlat\u0131yoruz.<\/p>\n<h2>Web Sitesi G\u00fcvenli\u011fi \u00d6nlemleri Nelerdir<\/h2>\n<p>Web sitesi g\u00fcvenli\u011fi \u00f6nlemleri be\u015f ana ba\u015fl\u0131kta toplan\u0131r: yaz\u0131l\u0131m\u0131 (\u00e7ekirdek, eklenti, tema) g\u00fcncel tutmak, g\u00fc\u00e7l\u00fc ve tekrars\u0131z \u015fifre kullan\u0131p iki ad\u0131ml\u0131 do\u011frulama a\u00e7mak, SSL sertifikas\u0131yla veri iletimini \u015fifrelemek, d\u00fczenli yedek almak ve sunucu d\u00fczeyinde otomatik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 bulunan bir bar\u0131nd\u0131rma kullanmak. Bu be\u015fi ayr\u0131 sorunlar\u0131 \u00e7\u00f6zer; biri eksik oldu\u011funda di\u011ferleri onun yerini tam olarak tutmaz.<\/p>\n<div class=\"highlight-box\">\n<p class=\"label\">Bilgi<\/p>\n<p>G\u00fcncelleme, \u015fifre ve yedekleme site sahibinin elindeki \u00f6nlemlerdir. SSL sertifikas\u0131 ve sunucu d\u00fczeyinde tarama ise bar\u0131nd\u0131rma sa\u011flay\u0131c\u0131s\u0131n\u0131n sundu\u011fu bir altyap\u0131d\u0131r; iki taraf da kendi pay\u0131na d\u00fc\u015feni yapmadan tam g\u00fcvenlik olu\u015fmaz.<\/p>\n<\/div>\n<h2>Yaz\u0131l\u0131m\u0131 G\u00fcncel Tutmak Neden \u00d6ncelikli<\/h2>\n<p>\u00c7ekirdek yaz\u0131l\u0131m, eklenti ve temalardaki g\u00fcvenlik a\u00e7\u0131klar\u0131 yay\u0131nland\u0131\u011f\u0131 anda kamuya duyurulur; bu andan itibaren g\u00fcncellemeyen her site otomatik taramalar\u0131n hedefi olur. G\u00fcncelleme \u00f6nceli\u011finin en y\u00fcksek olmas\u0131n\u0131n nedeni budur: di\u011fer \u00f6nlemler devrede olsa bile bilinen bir a\u00e7\u0131k \u00fczerinden do\u011frudan giri\u015f m\u00fcmk\u00fcn olur. Bu ihmal sonucunda site ele ge\u00e7irilirse izlenecek s\u0131ray\u0131 <a href=\"https:\/\/narhost.com\/blog\/site-hacklenirse-ne-yapmali\/\" title=\"Web siteniz hacklenirse ne olur, ilk yap\u0131lmas\u0131 gerekenler \u2014 Narhost Blog\">site hacklenirse ne yapmal\u0131 yaz\u0131m\u0131zda<\/a> ayr\u0131nt\u0131l\u0131 anlatt\u0131k.<\/p>\n<figure class=\"nh-sema\"><img loading=\"lazy\" src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/web-sitesi-guvenligi-onlemleri-sema-narhost.webp\" alt=\"Web sitesi g\u00fcvenli\u011fi \u00f6nlemleri sorusunun cevab\u0131n\u0131 g\u00f6steren be\u015f katmanl\u0131 \u00f6nlem \u015femas\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>G\u00fcncelleme, \u015fifre\/2FA, SSL, yedekleme ve sunucu d\u00fczeyi tarama birlikte uyguland\u0131\u011f\u0131nda bir katmandaki eksik di\u011ferleri taraf\u0131ndan kar\u015f\u0131lan\u0131r.<\/figcaption><\/figure>\n<h2>\u015eifre, \u0130ki Ad\u0131ml\u0131 Do\u011frulama ve Giri\u015f G\u00fcvenli\u011fi<\/h2>\n<p>Panel, veritaban\u0131 ve FTP i\u00e7in farkl\u0131 ve uzun \u015fifreler kullanmak ilk ad\u0131md\u0131r; ayn\u0131 \u015fifrenin birden fazla hizmette kullan\u0131lmas\u0131, ba\u015fka bir s\u0131z\u0131nt\u0131da sitenizin de risk alt\u0131na girmesine yol a\u00e7ar. \u0130kinci ad\u0131m iki ad\u0131ml\u0131 do\u011frulamad\u0131r: \u015fifre \u00e7al\u0131nsa bile ikinci bir kan\u0131t olmadan oturum a\u00e7\u0131lamaz. \u00dc\u00e7\u00fcnc\u00fc ad\u0131m giri\u015f deneme s\u0131n\u0131rlamas\u0131d\u0131r; art arda ba\u015far\u0131s\u0131z giri\u015flerde hesab\u0131 ge\u00e7ici olarak kilitlemek otomatik sald\u0131r\u0131lar\u0131 yava\u015flat\u0131r. Bu \u00fc\u00e7 katman\u0131n nas\u0131l birlikte \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 <a href=\"https:\/\/narhost.com\/blog\/2fa-neden-gerekli\/\" title=\"\u0130ki fakt\u00f6rl\u00fc do\u011frulama (2FA) neden \u00f6nemli \u2014 Narhost Blog\">2FA neden gerekli yaz\u0131m\u0131zda<\/a> ve <a href=\"https:\/\/narhost.com\/blog\/brute-force-nedir\/\" title=\"Brute force nedir ve sunucunuzu nas\u0131l korursunuz \u2014 Narhost Blog\">brute force nedir yaz\u0131m\u0131zda<\/a> ayr\u0131 ayr\u0131 ele ald\u0131k; uygulama \u00f6nerileri i\u00e7in <a href=\"https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Multifactor_Authentication_Cheat_Sheet.html\" title=\"OWASP Multifactor Authentication Cheat Sheet \u2014 uygulama \u00f6nerileri\" target=\"_blank\" rel=\"noopener\">OWASP&#8217;\u0131n \u00e7ok fakt\u00f6rl\u00fc do\u011frulama kayna\u011f\u0131na<\/a> da bakabilirsiniz.<\/p>\n<table>\n<thead>\n<tr>\n<th>\u00d6nlem<\/th>\n<th>Ne i\u015fe yarar<\/th>\n<th>Payla\u015f\u0131ml\u0131 hostingde<\/th>\n<th>VPS\/VDS&#8217;te<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Yaz\u0131l\u0131m g\u00fcncelleme<\/td>\n<td>Bilinen a\u00e7\u0131\u011f\u0131 kapat\u0131r<\/td>\n<td>Site sahibi<\/td>\n<td>Site sahibi<\/td>\n<\/tr>\n<tr>\n<td>G\u00fc\u00e7l\u00fc \u015fifre + 2FA<\/td>\n<td>Hesap ele ge\u00e7irmeyi zorla\u015ft\u0131r\u0131r<\/td>\n<td>Site sahibi<\/td>\n<td>Site sahibi<\/td>\n<\/tr>\n<tr>\n<td>SSL sertifikas\u0131<\/td>\n<td>Veri iletimini \u015fifreler<\/td>\n<td>\u00dccretsiz, panelden a\u00e7\u0131l\u0131r<\/td>\n<td>Site sahibi kurar<\/td>\n<\/tr>\n<tr>\n<td>D\u00fczenli yedekleme<\/td>\n<td>Bula\u015fma sonras\u0131 geri d\u00f6n\u00fc\u015f sa\u011flar<\/td>\n<td>Bar\u0131nd\u0131rma altyap\u0131s\u0131<\/td>\n<td>Site sahibi<\/td>\n<\/tr>\n<tr>\n<td>Sunucu d\u00fczeyi tarama<\/td>\n<td>Bilinen zararl\u0131 dosyay\u0131 yakalar<\/td>\n<td>Bar\u0131nd\u0131rma sa\u011flay\u0131c\u0131s\u0131<\/td>\n<td>Site sahibi (y\u00f6netimsiz)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"senaryo-block\">\n<p class=\"label\">\u00d6rnek senaryo<\/p>\n<p>Bir dan\u0131\u015fmanl\u0131k firmas\u0131 sitesini kurarken SSL sertifikas\u0131n\u0131 a\u00e7t\u0131 ama eklenti g\u00fcncellemelerini birka\u00e7 ay ihmal etti. Bilinen bir a\u00e7\u0131k \u00fczerinden site ele ge\u00e7irildi; SSL ba\u011flant\u0131y\u0131 \u015fifrelemi\u015fti ama sitenin kendi kodundaki a\u00e7\u0131\u011f\u0131 kapatmam\u0131\u015ft\u0131. Eklentiler g\u00fcncellenip \u015fifreler de\u011fi\u015ftirildikten, iki ad\u0131ml\u0131 do\u011frulama a\u00e7\u0131ld\u0131ktan sonra site tekrar sorunsuz \u00e7al\u0131\u015ft\u0131.<\/p>\n<\/div>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>SSL sertifikas\u0131 yaln\u0131zca veri iletimini \u015fifreler; sitenizin kodundaki bir a\u00e7\u0131\u011f\u0131 ya da zay\u0131f bir \u015fifreyi kapatmaz. &#8220;SSL var, g\u00fcvenliyim&#8221; varsay\u0131m\u0131 en s\u0131k yap\u0131lan hatalardan biridir.<\/p>\n<\/div>\n<h2>Yedekleme Neden Bir G\u00fcvenlik \u00d6nlemidir<\/h2>\n<p>Yedekleme sald\u0131r\u0131y\u0131 \u00f6nlemez ama etkisini geri al\u0131nabilir h\u00e2le getirir. Zararl\u0131 yaz\u0131l\u0131m bula\u015ft\u0131\u011f\u0131nda ya da bir dosya yanl\u0131\u015fl\u0131kla silindi\u011finde temiz bir yede\u011fe d\u00f6nmek, dosya dosya inceleme yapmaktan \u00e7ok daha h\u0131zl\u0131d\u0131r. Yede\u011fin d\u00fczenli al\u0131nmas\u0131 kadar, bula\u015fma \u00f6ncesine ait bir kopyan\u0131n da saklanmas\u0131 \u00f6nemlidir; yaln\u0131zca son h\u00e2li tutan bir yedek d\u00fczeni, zararl\u0131 kodu da birlikte saklayabilir.<\/p>\n<h2>Payla\u015f\u0131ml\u0131 Hosting ve VPS\/VDS&#8217;te Sorumluluk Nas\u0131l Ayr\u0131l\u0131r<\/h2>\n<p>Payla\u015f\u0131ml\u0131 hostingde sunucu d\u00fczeyinde otomatik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131, g\u00fcvenlik duvar\u0131 ve hesaplar aras\u0131 izolasyon bar\u0131nd\u0131rma sa\u011flay\u0131c\u0131s\u0131 taraf\u0131ndan sa\u011flan\u0131r; SSL sertifikas\u0131 da paketle birlikte \u00fccretsiz gelir. Buna kar\u015f\u0131l\u0131k sitenizin kendi kodu, eklentileri, temalar\u0131 ve hesap \u015fifreleri her zaman size aittir. VPS ve VDS hizmetlerinde durum tamamen de\u011fi\u015fir: bu \u00fcr\u00fcnler y\u00f6netimsizdir, i\u015fletim sistemi g\u00fcncellemesi, g\u00fcvenlik duvar\u0131 yap\u0131land\u0131rmas\u0131 ve uygulama g\u00fcvenli\u011finin tamam\u0131 sunucuyu kullanan ki\u015fiye aittir.<\/p>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p>Be\u015f \u00f6nlem (g\u00fcncelleme, \u015fifre\/2FA, SSL, yedekleme, sunucu d\u00fczeyi tarama) birlikte uyguland\u0131\u011f\u0131nda bir katmandaki aksakl\u0131k di\u011ferleri taraf\u0131ndan kar\u015f\u0131lan\u0131r. Web sitesi g\u00fcvenli\u011fi \u00f6nlemleri tek seferlik bir kurulum de\u011fil, s\u00fcrekli tekrarlanan bir rutindir.<\/p>\n<\/div>\n<h2>Web Sitesi G\u00fcvenli\u011fi \u0130\u00e7in Kontrol Listesi<\/h2>\n<ul class=\"kontrol-listesi\">\n<li>\u00c7ekirdek yaz\u0131l\u0131m, eklenti ve temalar\u0131 d\u00fczenli g\u00fcncelleyin; bildirilen g\u00fcvenlik yamalar\u0131n\u0131 ertelemeyin.<\/li>\n<li>Panel, veritaban\u0131 ve FTP i\u00e7in farkl\u0131, uzun \u015fifreler belirleyin.<\/li>\n<li>Y\u00f6netici giri\u015finde iki ad\u0131ml\u0131 do\u011frulamay\u0131 a\u00e7\u0131n.<\/li>\n<li>SSL sertifikas\u0131n\u0131n aktif ve g\u00fcncel oldu\u011funu taray\u0131c\u0131dan kontrol edin.<\/li>\n<li>D\u00fczenli yedek al\u0131nd\u0131\u011f\u0131ndan ve yede\u011fin indirilebilir oldu\u011fundan emin olun.<\/li>\n<li>Kullan\u0131lmayan eklenti, tema ve kullan\u0131c\u0131 hesaplar\u0131n\u0131 kald\u0131r\u0131n.<\/li>\n<li>VPS\/VDS kullan\u0131yorsan\u0131z i\u015fletim sistemi ve g\u00fcvenlik duvar\u0131 g\u00fcncellemelerini kendiniz takip edin.<\/li>\n<li>Arama konsolundaki g\u00fcvenlik sorunlar\u0131 raporunu d\u00fczenli kontrol edin.<\/li>\n<\/ul>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>Web sitesi g\u00fcvenli\u011fi \u00f6nlemleri aras\u0131nda en \u00f6ncelikli olan\u0131 hangisi?<\/h3>\n<p>Yaz\u0131l\u0131m\u0131 g\u00fcncel tutmak genellikle ilk s\u0131radad\u0131r; bilinen bir a\u00e7\u0131k kapat\u0131lmadan di\u011fer \u00f6nlemler devrede olsa bile do\u011frudan giri\u015f yolu a\u00e7\u0131k kal\u0131r.<\/p>\n<h3>SSL sertifikas\u0131 tek ba\u015f\u0131na yeterli mi?<\/h3>\n<p>Hay\u0131r. SSL yaln\u0131zca veri iletimini \u015fifreler; sitenizin kodundaki a\u00e7\u0131\u011f\u0131, zay\u0131f \u015fifreyi ya da g\u00fcncellenmemi\u015f eklentiyi kapatmaz. Di\u011fer \u00f6nlemlerle birlikte kullan\u0131lmal\u0131d\u0131r.<\/p>\n<h3>K\u00fc\u00e7\u00fck bir kurumsal site bu kadar \u00f6nleme ger\u00e7ekten ihtiya\u00e7 duyar m\u0131?<\/h3>\n<p>Evet. Sald\u0131r\u0131lar\u0131n b\u00fcy\u00fck k\u0131sm\u0131 hedef se\u00e7ici de\u011fildir; otomatik taramalar site b\u00fcy\u00fckl\u00fc\u011f\u00fcne bakmaks\u0131z\u0131n bilinen a\u00e7\u0131klar\u0131 arar.<\/p>\n<h3>Payla\u015f\u0131ml\u0131 hostingde hangi \u00f6nlemler zaten bar\u0131nd\u0131rma taraf\u0131ndan sa\u011flan\u0131r?<\/h3>\n<p>Sunucu d\u00fczeyinde otomatik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131, g\u00fcvenlik duvar\u0131, hesaplar aras\u0131 izolasyon ve \u00fccretsiz SSL sertifikas\u0131 bar\u0131nd\u0131rma sa\u011flay\u0131c\u0131s\u0131 taraf\u0131ndan sunulur.<\/p>\n<h3>VPS\/VDS&#8217;te g\u00fcvenlik \u00f6nlemlerini kim uygular?<\/h3>\n<p>Tamam\u0131n\u0131 sunucuyu kullanan ki\u015fi uygular; bu \u00fcr\u00fcnler y\u00f6netimsizdir ve i\u015fletim sistemi ile uygulama g\u00fcvenli\u011fi bar\u0131nd\u0131rma sa\u011flay\u0131c\u0131s\u0131 taraf\u0131ndan otomatik sa\u011flanmaz.<\/p>\n<\/div>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost&#8217;ta<\/p>\n<p>Web hosting paketlerinde \u00fccretsiz SSL sertifikas\u0131 ve sunucu d\u00fczeyinde otomatik k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m taramas\u0131 bulunur; sitenizin kendi g\u00fcvenlik \u00f6nlemlerini panelden siz y\u00f6netirsiniz.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/web-hosting\" title=\"Narhost web hosting paketleri\">Web hosting paketlerini incele<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Web sitesi g\u00fcvenli\u011fi \u00f6nlemleri be\u015f ba\u015fl\u0131kta toplan\u0131r: g\u00fcncel yaz\u0131l\u0131m, g\u00fc\u00e7l\u00fc \u015fifre ve iki ad\u0131ml\u0131 do\u011frulama, SSL sertifikas\u0131, d\u00fczenli yedekleme ve sunucu d\u00fczeyinde otomatik tarama.<\/p>\n","protected":false},"author":1,"featured_media":2446,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"class_list":["post-2445","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2445","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/comments?post=2445"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2445\/revisions"}],"predecessor-version":[{"id":2447,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/posts\/2445\/revisions\/2447"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media\/2446"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/media?parent=2445"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/categories?post=2445"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/blog\/wp-json\/wp\/v2\/tags?post=2445"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}