Codecanyon Full Download: Sensible Safety Gear

Smart Security Gear is a powerful plugin for bettering safety of your WordPress powered web site. Plugin comprises number of tweaks and tools for additonal safety protection in conjunction with Security Guide that may permit you to resolve what must be performed.

Plugin contains integration of VirusTotal and Sucuri Unfastened Safety Scanners (shows malware at the site and blacklisting standing on top security similar websites). Plugin contains database primarily based Security Log that can log different adventure varieties you'll use to detemerime issues, possible assaults and exploits, IP’s used for get entry to, referers, user dealers… you'll ban IP’s from Security Log.

Safety Marketing Consultant will permit you to get started

Security Advisor will help you get started

Plugin provides tips about what you want to improve in your web site. Based Totally at the standing of tips on this panel, plugin will calculate safety percentage. it's necessary to observe all recommended tips and as so much as you need optional pointers.

selection of simple to use safety tweaks

Collection of easy to use security tweaks

Basic tweaks are simple to set up, and you can clear up many safety problems instantly with these. some of those tweaks, if lively will even log safety events into database.

Checklist of normal tweaks

Add X-Content-Kind-Choices header (v3.5)
Add X-Frame-Options header (v3.5)
Upload X-XSS-Coverage header (v3.5)
Add Strict-Delivery-Security header (v3.5)
Dispose Of X-Powered-By header (v3.5)
Eliminate XML-RPC Multicall strategies (v3.2)
Do Away With X-Pingback Header (v2.7)
Remove XML-RPC Pingback strategies (v2.7)
Cast Off script and types variations (v2.0)
Save You access to banned IP’s (v1.5)
Prevent SQL injections
Save You too lengthy URL’s
Simple registration honeypot
Dispose Of errors from login display
Prohibit username duration
Remove username from comments CSS classes
Remove WordPress model
Remove RSD hyperlink
Cast Off WLW show up hyperlink
Disable XML-RPC

selection of robust .htaccess improvements

Collection of powerful .htaccess enhancements

most vital security measures are carried out the usage of .htaccess report within the WordPress root directory. this is to be had just for Apache (and LiteSpeed) primarily based web servers.

Record of .htaccess tweaks

Add Strict-Shipping-Security header (v3.5)
Eliminate X-Powered-Through header (v3.3)
Upload X-Content-Sort-Options header (v3.3)
Upload X-Body-Options header (v3.3)
Add X-XSS-Protection header (v3.3)
Set right kind 403 handler report (v3.0)
Save You scans for some commonplace recordsdata (v3.0)
Deny SUBMIT requests using HTTP 0.9 or 1.0 (v2.2)
Save You WordPress install listing surfing
Disable the Server Signature on server errors pages
Deny all comments requests and not using a legitimate referer
Save You get right of entry to to WordPress root system information
Ban get admission to to IP’s banned in Safety Log
Ban access to additional listed IP’s
Prohibit body dimension of a unmarried request and report upload size
Save You get entry to to XML-RPC as a result of Pingback Vulnerability
Disable Hint and Track request methods
Blacklist Question Strings the use of indexed laws
Blacklist Request Strings the use of indexed regulations
Blacklist Person Retailers using indexed laws

Security Logs to trace security related events

Security Logs to track security related events

Security Log provides two database tables to log every type of safety related events. for every event you will get information about person (or visitor), IP, person agent, referer and different knowledge dependent on adventure that can mean you can track resources of recent safety probes or attacks. you'll be able to ban IP addresses during the safety log panel.

Examine security logs for IP’s thread stage

Because model 1.5 of the plugin, new panel is added where you can see aggregated log results for individual IP’s with expected danger degree in accordance with choice of logged occasions and events type. this may help you make a decision if the IP have to be banned. some of the actions logged are probably malicious they usually are marked within the plugin settings.

Checklist of occasions types logged by plugin

Login / Logout / Login Mistakes / Login Failed
Person Profile / Password Modified
Registration / Registration Honeypot
SQL Injection URL / Too Long URL
Mistakes 404 – PHP, Query, Internet File, Media, Script
Plugin Activated / Deactivated
Plugin / Subject / Core Improve Finished
Get Right Of Entry To Robots.txt Record

Further log choices to spot experience source

IP Geolocation
IP WhoIS

Security emails notification system

Plugin can ship day-to-day and weekly digest emails with evaluate of logged events and IP’s. Also, some occasions can generate email notifications. most important notification is malicious alert e-mail despatched when number of logged malicious occasions reaches set number in specified time period (TWO HUNDRED occasions within the earlier 30 minutes is default).

Other Plugin Options Integrated

Consumer bills registration keep watch over
Registration control filters for Person Agent and Electronic Mail
Save person last task time and web page
WordPress toolbar Security Menu
Modification ‘admin’ username if exists
Change any username
Export and Import settings
Beef Up for Multisite WordPress mode

Gadget and WordPress Necessities

WordPress 4.0 or more moderen
PHP 5.3 or more recent
Apache Web Server (for .htaccess based tweaks and tools)
Access to .htaccess file (if no longer, you need to manually add changes to it)

Addons for Sensible Safety Gear

Those addons are not incorporated with the plugin, they wish to be purchased one at a time.

Smart Security Tools: Firewall Addon

Add Include further URL and consumer dealers filters and scanners to come across and prevent various malicious attempts and attainable vulnerabilities exploits.

Smart Security Tools: reCAPTCAHA Addon

Upload reCAPTCHA coverage to numerous WordPress forms and third birthday party well-liked plugins. you'll be able to also log failed attempts and ban users that fail the take a look at many times.

Smart Security Tools: Login Limit Addon

Take keep an eye on over login attempts, and prohibit choice of attempts or use of limited usernames from comparable IP. This might help fighting malicious brute power login assaults.

Smart Security Tools: Live Monitor Addon

Smart Security Tools: Live Monitor Addon

Reveal live all security events logged by way of the Smart Safety Tools using LIVE Events Reveal panel or by getting browser/personal computer or web site based totally notifications.

Documentation

Plugin comprises PDF consumer and developers guide within the plugin bundle, throughout the ‘doctors’ directory. check out this documents to get knowledge on plugin options, usage and more.

Disclaimers

Support for Apache 2.4 .htaccess layout continues to be experimental, so be certain you backup .htaccess and check everything to be certain all is okay.
For .htaccess primarily based tweaks and equipment plugin supports simplest Apache (and LiteSpeed) web servers. when you use any other internet server, you'll handiest use different plugin options.
be sure that you read plugin documentation and the entire data supplied through the plugin for each tweak and tool.
be certain you backup .htaccess file whenever you are making adjustments to plugin settings for .htaccess tweaks and take a look at changes you are making!
for those who make adjustments to blacklist .htaccess tweaks, or record of IP’s to prohibit, watch out with those changes, or you can even lock your self out of the website.
you might be using Sensible Security Gear for WordPress at your own chance.

Changelog

Version 3.6 / 2016.10.24.

Introduced: Use burner electronic mail suppliers listing for registration filtering
Delivered: Enhance for CloudFlare whilst getting visitor IP
Brought: More Suitable functions for getting customer IP
Progressed: Flags show for geolocation of IP addresses
Advanced: Safety log desk now has IP column indexed
Stepped Forward: Safety httpbl table now has IP column indexed
Progressed: Safety ban table now has price column listed
Modified: all JavaScript files are minified best, now not packed
Changed: up to date all translation strings in POT report
Changed: plugin is totally tested with PHP 7.0
Mounted: Performance factor with getting record of events for IP analysis
Fastened: Few minor issues with a few safety header tweaks