WordPress admin, hosting/panel access as per scope, info about CDN/WAF, and any previous hack/malware history.