20/11/2025
Government sites should not use WordPress because national digital infrastructure requires the highest standards of security, stability, and professional credibility—standards that a consumer-grade content management system simply cannot meet.
When a government website goes down or gets breached, it's not merely a technical inconvenience; it signals institutional incompetence and erodes public confidence in the government's ability to protect sensitive data and deliver essential services.
Most Kenyan government's (apart from ecitizen) use of WordPress exemplifies this risk: the platform's fundamental architecture relies on a patchwork of third-party plugins, any of which could be exploited by malicious actors to inject scripts and compromise entire systems.
Compounding this vulnerability, WordPress sites frequently run on outdated components that remain unpatched, leaving critical government infrastructure exposed to well-known security exploits.
A nation's digital presence must reflect the gravity and professionalism of governance itself, not the structural weaknesses of a blogging platform repurposed beyond its intended scope.
