Report Portal

• ✓
  WordPress login URL exposed at /wp-adminFixed: WPS Hide Login installed. Admin URL now at a custom path — default /wp-admin returns 404. Eliminates the majority of automated brute-force attempts.
• ✓
  XML-RPC endpoint enabledFixed: “Disable XML-RPC” plugin installed and active — all requests blocked at the WordPress filter level. No .htaccess dependency.
• ✓
  WordPress file editor accessible in adminAlready locked: DISALLOW_FILE_EDIT is defined in wp-config.php. Theme and plugin file editors both return “not allowed.”
• ✓
  Plugin CVE vulnerability checkKing Addons and RomethemeKit were confirmed not installed on the site. No vulnerable plugin versions detected at time of audit.

• !
  No Web Application Firewall activeNo WAF layer on the site. Recommended: Install Wordfence (free) or enable Cloudflare WAF — adds DDoS protection, CDN, and faster page loads. Takes under 30 minutes.

  Unassigned
• !
  Two-factor authentication not enforcedAdmin and Editor accounts have no 2FA requirement. Recommended: Install WP 2FA plugin and enforce for Editor role and above. Takes ~15 minutes.

  Unassigned

• ✓
  SSL / HTTPS active and validValid certificate in place. All traffic served over HTTPS. No mixed-content warnings detected.
• ✓
  WordPress core is currentRunning a recent WP version. No core CVEs flagged at time of audit.
• ✓
  File modification locked at config levelDISALLOW_FILE_EDIT and DISALLOW_FILE_MODS in wp-config.php means even a compromised admin account can’t edit plugin or theme files.

• ✓
  Homepage H1 was “DEATH”The Easter hero used an H1 tag for “DEATH / TO / LIFE.” Google was indexing this site’s primary topic as “DEATH.” Fixed: heading converted to H2 in Elementor. H1 now reads “Find life that lasts.”
• ✓
  Footer copyright was © 2023Updated to © 2026 in Elementor Theme Builder footer template.

• !
  Meta descriptions missing on key pagesHomepage, About, Connect, Services, and Sermons pages have no custom meta descriptions. Google is auto-generating them. Write 150–160 character descriptions for each top-level page.

  Unassigned
• !
  Image alt text missing on key imagesHero images and event images are missing alt attributes. Affects both SEO and accessibility (WCAG 2.1). Add descriptive alt text to all significant images.

  Unassigned
• !
  Heading hierarchy on inner pagesSome inner pages show multiple H1 tags or skipped heading levels. Recommend a heading audit on /connect, /about, and /sermons.

  Unassigned

• ✓
  Dead Universal Analytics tag removedUA-52373184-1 was still being injected on every page load by Site Kit, even though Google shut down Universal Analytics in July 2023. Fixed by clearing googlesitekit_analytics_settings directly.

• ✓
  Google Analytics 4 — G-GDJP64SE7LMeasurement ID connected via Site Kit. Collecting page views, sessions, engagement rate, and standard GA4 events.
• ✓
  Google Tag — GT-NFXGH4HGoogle Tag container active and firing correctly alongside GA4.

• i
  Set up GA4 conversion events for ministry goalsConsider adding custom events for: sermon plays, Connect form submissions, Location page visits, and giving button clicks.
• i
  Review Site Kit access and Google accountConfirm the connected Google account is accessible to the right people long-term (not tied to one personal account).

• ✓
  WPS Hide LoginHides the default WordPress login URL. /wp-admin returns 404 to bots. 200,000+ active installs, actively maintained.
• ✓
  Disable XML-RPC (by Phil Erb)Blocks all XML-RPC requests at the WordPress filter level. Eliminates a common brute-force and DDoS attack vector. 200,000+ active installs.

• !
  Verify automated backups are runningConfirm a backup plugin (UpdraftPlus, BackupBuddy) is active — or that your host’s backup solution is running weekly with off-site storage.

  Unassigned
• !
  Audit and remove unused pluginsInactive plugins still represent attack surface. Deactivate and delete anything not actively in use.

  Unassigned
• i
  Enable plugin update notificationsTurn on email notifications for plugin updates in WP Admin → Settings → General. Security-related updates should be applied within 48 hours of release.

• ✓
  Church + LocalBusiness schema markup (JSON-LD) — written, ready to installFull Church / PlaceOfWorship JSON-LD written with both campuses, service times, knowsAbout array, Diocese sameAs links. Copy from the Schema tab → paste into Rank Math → Custom Schema.

  Ready to install
• ✓
  Event schema templates (services + Explore + Alpha) — written, ready to install4 templates: all Sunday services as recurring Event, Explore event, Alpha as Course with sameAs: alpha.org (powerful AI signal), and a generic event fill-in. See Schema tab.

  Ready to install
• ✓
  Meta titles + descriptions for all 10 top-level pages — written, ready to pasteHomepage, About, Connect, Services, Sermons, Explore, Give, Location, Waterloo campus, Rockdale campus — all under 60/160 chars, geographic + theological keywords. See Schema tab.

  Ready to paste into Rank Math
• ✓
  About page entity statement + opening paragraph rewrite — writtenFull rewrite anchors Grace City to “Waterloo (Inner South Sydney)” and “Rockdale (St George area),” names the Diocese, and creates a cross-entity link via the Alpha mention. See Schema tab.

  Ready to paste into WordPress

• ✓
  Podcast episode description boilerplate + YouTube templates — writtenFull episode template, show-level description (for Spotify/Apple Podcasts settings), and YouTube description template with early domain link structure and hashtags. See Schema tab.

  Ready to use for next episode
• ✓
  Entity disambiguation — “Grace City Church Waterloo” vs Northern Beaches — addressed in all copyEvery deliverable (schema, meta, About page, podcast boilerplate) uses “Waterloo” or “Rockdale” — never just “Sydney.” The entity is now precisely anchored in every signal layer.

  Addressed throughout

• ✓
  Podcast boilerplate written — add to every episode descriptionStandard footer + full episode template. Includes links to gracecity.com.au/sermons and gracecity.com.au/explore. Priority: update the 10 most-listened + 10 most recent episodes first. See Schema tab.

  Template ready
• ✓
  YouTube description template written — use for next upload + backdate top 20Template puts domain link in first 3 lines (critical for AI entity linking). Includes About section, service times, Explore/Alpha link, and hashtags. See Schema tab.

  Template ready

• ✓
  Diocese listing submission email — written, ready to sendFormatted church description + email to Diocese comms at sydneyanglican.net/contact. Includes both campus details, asks for “Grace City Church” (not “Grace City”) and description mentioning Explore/Alpha. See Schema tab.

  Ready to send
• ✓
  TGCA outreach email — 2 options written, ready to sendOption A: article contribution pitch (recommended — stronger backlink than listing). Option B: partner church listing request. Both are complete. Fill in the specific article topic in Option A before sending. See Schema tab.

  Ready to send
• ✓
  Image alt text written for all key images — ready to paste into WordPressHomepage, Sermons, Connect, Explore, Rockdale, About, and Give page images all covered. Add via Media Library or Elementor image widget. Start with homepage hero. See Schema tab.

  Ready to paste

• i
  Monthly AI visibility testAsk ChatGPT, Claude, and Gemini: “I’m looking for a Bible-teaching church in Waterloo, Sydney.” Log results in the benchmark table below.
• i
  Keep sermon metadata currentEvery new sermon series needs: scripture reference, speaker, series name, and a description.
• i
  One geo-tagged blog post per monthA short post each month mentioning Waterloo, Alexandria, Liverpool, or Inner South Sydney builds local authority over time.
• i
  Keep Google Business Profile active for each campusPost current sermon series at minimum monthly per campus. Ensure category is “Anglican Church” not just “Church.” GBP posts get scraped by AI systems.
• i
  Annual schema reviewOnce a year: check service times, addresses, and sameAs links are accurate. Verify the knowsAbout field still reflects how Grace City actually preaches.

Where to install: Rank Math → Titles & Meta → Homepage → scroll to Custom Schema. Paste the block below into a new “Custom Schema” entry and save. Also add to the About page.

<script type="application/ld+json">
{
  "@context": "https://schema.org",
  "@type": ["Church", "PlaceOfWorship"],
  "@id": "https://gracecity.com.au/#church",
  "name": "Grace City Church",
  "alternateName": "Grace City Church Waterloo",
  "url": "https://gracecity.com.au",
  "description": "Grace City is a Bible-teaching, gospel-centred Anglican church in Waterloo, serving the Inner South Sydney community. Committed to expository preaching and the Five Solas.",
  "denomination": "Anglican",
  "knowsAbout": ["Expository Preaching","Reformed Theology","Anglican Diocese of Sydney","Gospel-centred ministry","Bible teaching","Sydney Anglicanism"],
  "member": { "@type": "Organization", "name": "Anglican Diocese of Sydney", "url": "https://www.sydneyanglican.net" },
  "location": [
    { "@type": "LocalBusiness", "@id": "https://gracecity.com.au/#waterloo",
      "name": "Grace City Church — Waterloo", "address": { "@type": "PostalAddress", "streetAddress": "[STREET ADDRESS]", "addressLocality": "Waterloo", "addressRegion": "NSW", "postalCode": "2017", "addressCountry": "AU" },
      "openingHoursSpecification": [
        { "@type": "OpeningHoursSpecification", "dayOfWeek": "Sunday", "opens": "09:00", "closes": "10:30", "name": "Morning Service 1" },
        { "@type": "OpeningHoursSpecification", "dayOfWeek": "Sunday", "opens": "11:00", "closes": "12:30", "name": "Morning Service 2" },
        { "@type": "OpeningHoursSpecification", "dayOfWeek": "Sunday", "opens": "18:00", "closes": "19:30", "name": "Evening Service" }
      ]
    },
    { "@type": "LocalBusiness", "@id": "https://gracecity.com.au/#rockdale",
      "name": "Grace City Church — Rockdale", "address": { "@type": "PostalAddress", "streetAddress": "[STREET ADDRESS]", "addressLocality": "Rockdale", "addressRegion": "NSW", "postalCode": "2216", "addressCountry": "AU" },
      "openingHoursSpecification": [
        { "@type": "OpeningHoursSpecification", "dayOfWeek": "Sunday", "opens": "16:00", "closes": "17:30", "name": "Sunday Service" }
      ]
    }
  ],
  "sameAs": ["https://www.facebook.com/gracecitychurch","https://www.youtube.com/@gracecitychurch","https://www.sydneyanglican.net"]
}
</script>

⚠️ Fill in first: Replace [STREET ADDRESS] for both campuses before installing. Everything else is ready.

Where to install: Add to the Events/Sundays page via Rank Math → Schema tab on that page. For Explore/Alpha, add to the Explore page. Use the Course block for Alpha — the sameAs: alpha.org is the most powerful AI signal in this entire plan.

<script type="application/ld+json">
{
  "@context": "https://schema.org",
  "@type": "Course",
  "name": "Alpha at Grace City Church",
  "description": "Alpha is an internationally recognised programme exploring the basics of the Christian faith in a relaxed, no-pressure environment. Run at both Waterloo and Rockdale campuses.",
  "provider": { "@type": "Organization", "name": "Grace City Church", "url": "https://gracecity.com.au" },
  "sameAs": "https://www.alpha.org",
  "url": "https://gracecity.com.au/explore",
  "hasCourseInstance": [
    { "@type": "CourseInstance", "courseMode": "onsite", "location": { "@type": "Place", "name": "Grace City Church Waterloo", "address": { "@type": "PostalAddress", "addressLocality": "Waterloo", "addressRegion": "NSW", "postalCode": "2017", "addressCountry": "AU" } } },
    { "@type": "CourseInstance", "courseMode": "onsite", "location": { "@type": "Place", "name": "Grace City Church Rockdale", "address": { "@type": "PostalAddress", "addressLocality": "Rockdale", "addressRegion": "NSW", "postalCode": "2216", "addressCountry": "AU" } } }
  ]
}
</script>

💡 Why this matters: Alpha is one of the best-documented Christian programmes in AI training data internationally. Linking Grace City’s Explore programme to alpha.org via sameAs is the single highest-value AI signal in this entire plan — it immediately associates Grace City with a globally recognised entity.

Where to install: Rank Math → Edit Snippet (pencil icon) on each page. Paste title into “Title” field, description into “Description” field. All under 60/160 chars.

HOMEPAGE
Title: Grace City Church Waterloo | Bible-Teaching Anglican Church Sydney
Description: Grace City is a Bible-teaching, gospel-centred Anglican church in Waterloo and Rockdale, Sydney. Sundays 9am, 11am & 6pm. Part of the Anglican Diocese of Sydney.

ABOUT
Title: About Grace City Church | Waterloo & Rockdale, Sydney
Description: Grace City Church is a Bible-teaching Anglican church in Waterloo (Inner South Sydney) and Rockdale (St George area). Committed to expository preaching and making disciples.

CONNECT / COME ALONG
Title: Come Along to Grace City Church | Waterloo & Rockdale
Description: New to Grace City? We'd love to meet you. Sunday services in Waterloo (9am, 11am, 6pm) and Rockdale (4pm + community dinner). All welcome — no prior church experience needed.

SERVICES / SUNDAYS
Title: Sunday Services | Grace City Church Waterloo & Rockdale
Description: Join us on Sundays at Grace City Church. Waterloo: 9am, 11am & 6pm (Kids Church & Youth at 9am). Rockdale: 4pm followed by a community dinner.

SERMONS
Title: Sermons | Grace City Church | Bible Teaching Sydney
Description: Verse-by-verse Bible teaching from Grace City Church — an evangelical Anglican church in Waterloo, Sydney. Part of the Anglican Diocese of Sydney. New messages weekly.

EXPLORE / ALPHA
Title: Explore Christianity | Alpha at Grace City Church Sydney
Description: Curious about Christianity? Join Explore — Grace City's relaxed series including the internationally recognised Alpha programme. No prior knowledge needed. Waterloo & Rockdale.

GIVE
Title: Give to Grace City Church | Support Gospel Ministry Sydney
Description: Support the gospel ministry of Grace City Church in Waterloo and Rockdale, Sydney. Give online to support Bible teaching, Kids Church, Youth, and Explore ministry.

LOCATION
Title: Find Us | Grace City Church Waterloo & Rockdale, Sydney
Description: Grace City Church meets in Waterloo (Inner South Sydney) and Rockdale (St George area). Find directions, parking info, and service times for both campuses.

WATERLOO CAMPUS
Title: Waterloo Campus | Grace City Church Inner South Sydney
Description: Grace City Church Waterloo meets Sundays 9am, 11am & 6pm. Kids Church & Youth at 9am. Close to Redfern and Alexandria. Part of the Anglican Diocese of Sydney.

ROCKDALE CAMPUS
Title: Rockdale Campus | Grace City Church St George Sydney
Description: Grace City Church Rockdale meets Sundays at 4pm, followed by a community dinner. Kids Church available. Serving the St George area — close to Kogarah and Arncliffe.

Note: Uninstall Yoast first — running Rank Math and Yoast simultaneously creates duplicate meta tags that confuse search engines. Keep Rank Math only.

Where to install: WordPress → About page → Elementor → replace the current opening paragraph with the text below. This is the single highest-impact content change on the site — AI systems classify a church entity primarily from the first paragraph of the About page.

Grace City Church is a Bible-teaching, gospel-centred Anglican church with campuses in Waterloo (Inner South Sydney) and Rockdale (St George area). We're part of the Anglican Diocese of Sydney — committed to expository, verse-by-verse preaching through the whole Bible, and to helping people in our city come to know and follow Jesus Christ.

We meet every Sunday across both campuses, and we run Explore — including the internationally recognised Alpha programme — for anyone curious about the Christian faith, no matter where they're starting from.

Grace City Church is a Bible-teaching Anglican church in Waterloo and Rockdale, Sydney. Part of the Anglican Diocese of Sydney. Sunday services at 9am, 11am & 6pm (Waterloo) and 4pm (Rockdale). We run Explore and Alpha for anyone curious about Christianity.

Podcast: Add the footer below to every episode description in Spotify for Podcasters (or wherever you publish). For back-catalogue, prioritise the 10 most-listened episodes first, then the 10 most recent.

---
Grace City Church is a Bible-teaching, gospel-centred Anglican church in Waterloo (Inner South Sydney) and Rockdale (St George area), Sydney, Australia.

📖 Full sermon notes and resources: https://gracecity.com.au/sermons
🗓️ Join us Sundays — Waterloo: 9am, 11am, 6pm | Rockdale: 4pm (+ dinner)
🔍 Curious about faith? Explore our Alpha programme: https://gracecity.com.au/explore
🌐 Website: https://gracecity.com.au

Part of the Anglican Diocese of Sydney.

YouTube: Use this template for every sermon upload. The domain link in the first 3 lines is critical — it’s what tells AI systems that this YouTube channel and gracecity.com.au are the same entity.

[SERMON TITLE] | [SCRIPTURE REFERENCE] | Grace City Church

[Speaker Name] preaches from [Scripture Reference] in this message from [Series Name].

🔗 Sermon notes & audio: https://gracecity.com.au/sermons/[sermon-slug]
🌐 Visit us: https://gracecity.com.au
📅 Come on a Sunday: https://gracecity.com.au/sundays

---

[2–4 sentences describing the sermon in plain English.]

ABOUT GRACE CITY CHURCH
Grace City is a Bible-teaching, gospel-centred Anglican church in Waterloo (Inner South Sydney) and Rockdale (St George area), Sydney.

📍 Waterloo — 9am, 11am & 6pm (Kids Church & Youth at 9am)
📍 Rockdale — 4pm (followed by community dinner)

New to faith or just curious? Check out Explore:
👉 https://gracecity.com.au/explore

Part of the Anglican Diocese of Sydney.

#GraceCity #BibleTeaching #Sydney #Anglican #ChristianSermon #Waterloo #ExpositoryPreaching

Send to: au.thegospelcoalition.org/contact — use Option A (article pitch) first. A published article with your byline and a link to gracecity.com.au is worth more for AI visibility than almost any other single action in this plan. Fill in one specific article topic before sending.

Subject: Article pitch — [brief topic] | Grace City Church, Sydney

Hi [Editor's name],

My name is Jade Hajj — I'm a pastor at Grace City Church, an Anglican church in Waterloo, Inner South Sydney. We're part of the Diocese of Sydney and committed to expository, gospel-centred ministry.

I've been a long-time reader of TGC Australia and have appreciated the way you give space to pastoral and theological reflection that's genuinely useful to local church ministry.

I'd love to contribute an article. A few directions I've been thinking about:

- [Option 1: e.g. "What expository preaching actually looks like in a diverse, inner-city congregation"]
- [Option 2: A pastoral reflection on how the gospel speaks to a current cultural moment]
- [Option 3: Running Explore/Alpha in a post-Christian urban context]

I'd be happy to work to your editorial guidelines and word count. If none of those fit what you're currently commissioning, I'm open to a brief.

Grateful for what TGC AU does — would love to contribute.

Grace,
Jade Hajj
Pastor, Grace City Church
jade.h@gracecity.com.au
https://gracecity.com.au

⚠️ Fill in before sending: Replace the bracketed article topic options with something specific to what you’re currently preaching or thinking about — the more specific, the better the response rate.

Send to: sydneyanglican.net/contact — or check sydneyanglican.net/find-a-church to see if Grace City is already listed. If listed but outdated, email to update. The Diocese backlink is one of the most authoritative available to a Sydney Anglican church — it creates a direct entity link between gracecity.com.au and the Diocese of Sydney.

Subject: Church listing update — Grace City Church, Waterloo & Rockdale

Hi [Diocese Comms],

I'm writing to request that Grace City Church's listing on sydneyanglican.net be added or updated. We have two campuses — Waterloo and Rockdale — and want to make sure our information is current.

Waterloo Campus
Address: [Address], Waterloo NSW 2017
Services: Sundays 9am, 11am, 6pm
Kids Church & Youth: 9am service

Rockdale Campus
Address: [Address], Rockdale NSW 2216
Services: Sundays 4pm (+ community dinner)
Kids Church: Available

Website: https://gracecity.com.au
Contact: jade.h@gracecity.com.au
Rector/Senior Pastor: [Pastor's name]

We'd also love for our listing description to mention that we run Explore/Alpha — it's a significant part of our outreach ministry and something people specifically search for.

Thank you for maintaining this resource — it's genuinely useful for people looking for a church home in Sydney.

Grace,
Jade Hajj
Pastor, Grace City Church
jade.h@gracecity.com.au

⚠️ Fill in before sending: Add street addresses for both campuses, senior pastor’s name, and phone number. Also check sydneyanglican.net/find-a-church first to see if the listing already exists.

Where to install: WordPress → Media Library → click any image → paste into the Alt Text field on the right panel. Or in Elementor: click the image widget → Content → Image → Alt Text. Start with the homepage hero.

HOMEPAGE HERO:
People gathering for Sunday service at Grace City Church, Waterloo, Inner South Sydney

HOMEPAGE — Congregation / lifestyle:
Grace City Church congregation in worship at Waterloo campus, Sydney

HOMEPAGE — Kids Church:
Children in Kids Church at Grace City Church, Waterloo — Sunday 9am service

HOMEPAGE — Youth:
Teenagers in Youth programme at Grace City Church Waterloo

SERMONS PAGE — Series banner:
[Series title] — current sermon series at Grace City Church, Waterloo, Sydney

CONNECT — Hero:
Welcome to Grace City Church — a Bible-teaching Anglican church in Waterloo, Inner South Sydney

EXPLORE — Hero:
Explore at Grace City Church — relaxed Christianity course including Alpha, Sydney

EXPLORE — Alpha image:
Alpha programme at Grace City Church — exploring Christianity in Waterloo and Rockdale, Sydney

ROCKDALE — Service:
Sunday 4pm service at Grace City Church Rockdale — St George area, Sydney

ROCKDALE — Community dinner:
Community dinner after Sunday service at Grace City Church Rockdale

ABOUT — Staff/team:
Grace City Church pastoral team — Waterloo and Rockdale campuses, Sydney

GIVE — Hero:
Supporting gospel ministry at Grace City Church, Sydney — give online

RULE: Always include "Grace City Church" + suburb name. Keep under 125 chars. Never start with "Image of" or "Photo of."