Hi michaelburge, you can do all these in the Appearance >> Menus in your backend. If you don’t need the link on the top menu, create a custom link with “#” (pound sign) as the link and name it accordingly.

If you don’t want it to be an active link use # sign or use URL if you wish to link it to a page or even other websites

Then add the submenus you need.

You can add a page, post or another custom menu as submenu. If you are using WooCommerce, you can add products, product categories and so on.

Once added, just drag it a little bit to the right under the top menu you previously created.

Click save.

I have been a victim of website hacking on because of my previous hosting, so it doesn’t matter how you secure your site if your hosting isn’t secure, you’d still get hacked. That’s the first thing you have to see to it.

Then the basic thing I do for most of my sites is to install SSL + CloudFlare + reCaptcha v3 (for spams).

For advanced security, WordFence Or Sucuri based on my experience. I only use them for enterprise clients.

Other habits,

• Monthly updates and backups (adjust timing accordingly)
• Rewrite common URLs
• Don’t use admin as user
• Rewrite theme names (use wp hide – vulnerabilities of wp, themes and plugins are constantly targeted)

Hope that helps.