Astra is the complete security suite for your WordPress. Rock solid firewall with immediate malware cleanup & security audit for your WordPress.

WebProtect.ai

Astra Web Security is the go-to security suite for your WordPress website. With Astra, you don’t have to worry about any malware, credit card hack, SQLi, XSS, SEO Spam, comments spam, brute force & 100+ types of threats. This means you can get rid of other security plugins & let Astra take care of it all.
Astra is installed as an extension by following self-served, easy to follow steps (takes less than 5 minutes). It means there is NO need to change DNS settings, unlike other security plugins. We offer Web Application Firewall to protect your website in real-time, on-demand machine learning-powered malware scanner, immediate malware cleanup, community Security & Vulnerability Assessment & Penetration Testing (VAPT) to find all possible flaws & business logic errors.
Through our intuitive dashboard, you can manage all your website & it doesn’t come with a hundred buttons that make you feel like you’re a pilot in a cockpit!
Astra Web Security is a Techstars company & the winner of the French Tech Ticket Program. Awarded as The Most Innovative Security Company at the Global Conference on Cyber Security.
Astra’s vision is to make cyber security a five-minute affair for businesses.
Astra’s promise to a business owner is that their business would be secure without any ifs or buts. If a business is using Astra, they will be secure – no questions asked.

Features
<ol>
<li>Web Application Firewall (WAF)</li>
<li>Robust community-powered security engine</li>
<li>Installs as an extension in your website (No need to change DNS settings)</li>
<li>Real-time SQLi, XSS, LFI & 100+ threats protection</li>
<li>Malware scanning & removal</li>
<li>Bad bots blocking</li>
<li>Country blocking/whitelisting</li>
<li>IP range blocking/whitelisting</li>
<li>IP profiling & tracking</li>
<li>Malicious file upload prevention</li>
<li>Controlling file upload size</li>
<li>Limiting upload by extension type</li>
<li>Admin login activity logging</li>
<li>Blocking automated vulnerability scanners</li>
<li>Admin brute force protection</li>
<li>Fake search engine bots blocking</li>
<li>File Injection/Webshell protection</li>
<li>Code Injection protection</li>
<li>Directory traversal protection</li>
<li>Automatic blocking of known hackers</li>
<li>Layer 7 DDoS protection</li>
<li>Smart honeypot system to trap hackers</li>
<li>Rate limit web requests</li>
<li>Automatic spam blocking</li>
<li>Content stealing & scraping prevention</li>
<li>Preventing spam comments</li>
<li>Htaccess security</li>
<li>No latency (Our turbo security engine takes less than0.002s to detect threats)</li>
</ol>
Hack Removal & Malware Scanner
<ol>
<li>Website Anti-virus & Anti-malware engine</li>
<li>Fixing SEO spam / SEO poisoning (Japanese, Pharma or Gibberish hack), website redirect hack, admin panel hack </li>
<li>Fixing Credit Card or Payment Checkout Page hack</li>
<li>Fixing defaced websites</li>
<li>Backdoor removal</li>
<li>Ever updating rules engine</li>
<li>Powered by community learning</li>
<li>Database security</li>
</ol>
Blacklist Monitoring
<ol>
<li>Website Anti-virus & Anti-malware engine</li>
<li>Fixing SEO spam / SEO poisoning (Japanese, Pharma or Gibberish hack), website redirect hack, admin panel hack </li>
<li>Fixing Credit Card or Payment Checkout Page hack</li>
<li>Fixing defaced websites</li>
<li>Backdoor removal</li>
<li>Ever updating rules engine</li>
<li>Powered by community learning</li>
<li>Database security</li>
</ol>
Intuitive Dashboard & Reporting
<ol>
<li>Super easy to use dashboard</li>
<li>Threat analytics</li>
<li>Trusting or Blocking IPs / IP ranges</li>
<li>Trusting or Blocking Countries </li>
<li>Hourly admin area login summary</li>
<li>Whitelist or Blacklist GET/POST/URLS</li>
<li>Available in all major languages </li>
<li>Information about threat origin country, browser, device, etc.</li>
<li>One click security for your entire business</li>
</ol>
Continuous Reports to Keep You Posted (Email & Slack)
<ol>
<li>Daily email reports giving summary of attacks stopped by Astra</li>
<li>Hourly login summary to track successful & failed login attempts</li>
<li>Slack notifications: set custom rules to notify specific events on slack</li>
</ol>
Human Support
<ol>
<li>24×7 chat & email support</li>
<li>Our real human support, known to go an extra mile to bring a smile</li>
<li>Giving hackers a friendly channel to report any vulnerability in your website</li>
<li>Every vulnerability reported by hackers validated by our security experts and only valid submissions reach you</li>
<li>Under the program policy, hackers cannot make any bugs on your website public</li>
</ol>

Astra Security Seal
<ol>
<li>Shows you are a security conscious company</li>
<li>Your customers feel more confident in sharing their personal information</li>
<li>Leads to less shopping cart abandonment </li>
<li>More conversions on the website – study would increase in 9.7% in conversion of one website due to Astra seal!</li>
</ol>
Product Demo
Astra Security Demo – <a href="https://demo.getastra.com/hey-there" rel="nofollow ugc">https://demo.getastra.com/hey-there</a>

Benefits For Customers
More Security Gives More Confidence in your website.
With Astra protecting your website, customers do not have to worry about security of their information. Their data is secure & miles away from hackers. Credit card hacks, loss of person information etc can’t touch your website now

Our Clients
Brands like Hotstar, Oman Airways, FirstPost, Gillette, DollsKill, LIC, African Union, Ford, Oman Airways, Kotak Bank, Tata Power, Xeno & many more trust Astra for their security.

<h3>Common WordPress Malware Attacks Prevented by Astra</h3>
Astra’s WordPress security suite can help you to fix & prevent the below mentioned attacks.
<ul>
<li><a href="https://www.getastra.com/blog/cms/wordpress-security/prevent-wordpress-brute-force-attack/" rel="nofollow ugc">Brute force attacks</a></li>
<li><a href="https://www.getastra.com/blog/911/pharma-hack-wordpress-and-drupal/" rel="nofollow ugc">Pharma hack</a></li>
<li><a href="https://www.getastra.com/blog/911/wordpress-redirect-hack/" rel="nofollow ugc">WordPress redirect hack</a></li>
<li><a href="https://www.getastra.com/blog/911/japanese-keyword-hack/" rel="nofollow ugc">Japanese keyword hack</a></li>
<li><a href="https://www.getastra.com/blog/911/remove-wordpress-spam-search-results/" rel="nofollow ugc">SEO spam hack</a></li>
<li><a href="https://www.getastra.com/blog/911/wordpress-xss-exploit/" rel="nofollow ugc">XSS or cross-site scripting hack</a></li>
<li><a href="https://www.getastra.com/blog/911/wp-vcd-malware-removal/" rel="nofollow ugc">WP-VCD Malware</a></li>
<li><a href="https://www.getastra.com/blog/cms/wordpress-security/wordpress-sql-injection-attack-protection/" rel="nofollow ugc">SQL injection</a></li>
<li><a href="https://www.getastra.com/blog/911/how-to-remove-fix-magento-opencart-credit-card-malware-hack/" rel="nofollow ugc">Credit Card Malware Hack</a></li>
<li><a href="https://www.getastra.com/blog/911/google-blacklist/" rel="nofollow ugc">Google Blacklist hack</a></li>
<li><a href="https://www.getastra.com/blog/911/google-adwords-account-suspended/" rel="nofollow ugc">Google Adwords Account Suspension</a></li>
<li><a href="https://www.getastra.com/blog/knowledge-base/ways-to-prevent-cookie-stealing/" rel="nofollow ugc">Cookie stealing & session hijacking</a></li>
<li><a href="https://www.getastra.com/blog/911/remove-google-phishing-warning-message" rel="nofollow ugc">WP phishing hack</a></li>
<li><a href="https://www.getastra.com/e/malware/infections/favicon-ico-malware-backdoor-in-wordpress-drupal" rel="nofollow ugc">Favicon.ico malware hack</a></li>
<li><a href="https://www.getastra.com/e/malware/infections/fixing-wp-feedphp-wp-tmpphp-malware-in-wordpress" rel="nofollow ugc">WP-Feed.php & WP-Tmp.php</a></li>
<li><a href="https://www.getastra.com/blog/911/wordpress-backdoor-hack/" rel="nofollow ugc">WP Backdoor hack</a></li>
<li><a href="https://www.getastra.com/blog/911/remove-crypto-mining-malware-cms-wordpress-magento-drupal/" rel="nofollow ugc">Coinhive hack (Crypto Mining Malware)</a></li>
<li><a href="https://www.getastra.com/blog/cms/website-defacement-removal/" rel="nofollow ugc">WordPress deface hack</a></li>
<li><a href="https://www.getastra.com/blog/911/remove-deceptive-site-ahead-warning/" rel="nofollow ugc">Deceptive Site Ahead</a></li>
<li><a href="https://www.getastra.com/blog/911/fix-monit-php-monetization-hack/" rel="nofollow ugc">Monetization Hack (monit.php)</a></li>
</ul>

Astra Security Suite – Firewall & Malware Scan

Step #1 is to sign up and make an account.  Diving up personal info to make a plugin work is against the the rules, isn't it?  No matter, this is a plug-in review, not a report.

IMO this plugin should be removed from the repository.

Alternatives to Astra Security Suite – Firewall & Malware Scan

Top alternatives