Yes, outsource it, WP Engine or Mediatemple are two options. - Don't run it on the same server as the web app - use less plugins - If the blog is on the same d

Yes, outsource it, WP Engine or Mediatemple are two options. - Don't run it on the same server as the web app - use less plugins - If the blog is on the same domain/a subdomain as the web app, take care of the cookie scope so that a potential XSS vulnerability can't be used to steal sessions etc.