Drupal 8 Site Audit Steps

Steps

Step 1  Checking Quality of Code
     
    Here i used the coder modules for checking The "Quality of Code" and I have checking the code and Drupal coding standard manually.

Step 2  Checking Core Security Update

    I checked the any security updates available in core and contributed modules 

Step 3 hacked Core and Contributed Modules
      
   Here I checked the following things

   1. List of hacked modules by using "Hacked" module.
   2. List of update available modules.
   3. List of unused modules.
   4. List of unsupported modules.
   5. List of deprecated modules.
   6. List of sandbox modules which are  used in this site. 

Step 4 Custom Modules
      Here i checked, what are the custom modules used in this site. And checked those modules really required or not.

Step 5 Code Security
  
    I used the security_review modules for checking coding level of security. 

Step 6 Server Security

    Here i checked following points and suggested Cloudflare WAF for advanced server side security.

   => Checked the basic SSL
   => File access permission through FTP,SSH and Cpanel.
   => DB access permission 
  

Step 7 3rd Party Tools and Plugins
  
     Here I checked the any 3rd Party web service modules or Plugins installed in this site and is it have secured connection for request and response