It could be both front end and back end, to avoid getting hacked or have your site compromised. Also making sure that there are no security holes in the site. There are various plugins, such as bulletproof security, etc. I personally feel lost when it comes to this area