Esteban

<p><strong>Aipatch Security Scanner</strong> is a lightweight security scanner that helps you understand and improve your site’s security posture.</p>
<p>Unlike heavy security suites, Aipatch Security Scanner focuses on <strong>clarity over complexity</strong>:</p>
<ul>
<li><strong>Security Score:</strong> A simple 0–100 score that summarizes your site’s security status at a glance.</li>
<li><strong>Local Scanner:</strong> Detects outdated plugins, themes, core versions, risky configurations, and common security weaknesses — all locally, with no external dependencies.</li>
<li><strong>Known Vulnerabilities:</strong> Checks your installed software against a built-in knowledge base of known vulnerabilities. Future versions will support external vulnerability feeds for broader coverage.</li>
<li><strong>Safe Hardening:</strong> Toggle security improvements like XML-RPC blocking, REST API restrictions, WordPress version hiding, and login brute-force protection — each with clear explanations and compatibility warnings.</li>
<li><strong>Security Logs:</strong> A clean log of all security events, scans, and changes made through the plugin.</li>
<li><strong>Site Health Integration:</strong> Adds custom security tests to the WordPress Site Health screen.</li>
<li><strong>Scan History:</strong> Every scan is saved so you can track your security score over time.</li>
<li><strong>Module Control:</strong> Enable or disable individual modules (scanner, hardening, vulnerabilities, login protection) from settings.</li>
</ul>
<h4>Philosophy</h4>
<p>Aipatch Security Scanner is designed to give site owners <strong>clear, actionable information</strong> without being overwhelmed by technical jargon or upsell pressure. Every finding includes what it means, why it matters, and what to do — in plain language.</p>
<h4>What Aipatch Security Scanner Does</h4>
<ul>
<li>Runs 12 local security checks against your installation</li>
<li>Calculates a risk score based on findings</li>
<li>Compares installed plugins, themes, and core against known vulnerabilities</li>
<li>Applies optional hardening rules via WordPress filters (no file modifications)</li>
<li>Logs all security events to a dedicated database table</li>
<li>Integrates with WordPress Site Health</li>
</ul>
<h4>What Aipatch Security Scanner Does NOT Do</h4>
<ul>
<li>It is NOT a firewall or WAF.</li>
<li>It does NOT scan files for malware.</li>
<li>It does NOT modify your .htaccess or wp-config.php automatically.</li>
<li>It does NOT phone home or require an account to function.</li>
<li>It does NOT intercept frontend requests or affect page load performance.</li>
</ul>
<h4>Future Roadmap</h4>
<ul>
<li>External vulnerability feed integration (API-based)</li>
<li>File integrity monitoring</li>
<li>Email alerts for critical findings</li>
<li>Extended multisite support</li>
</ul>


Aipatch Security Scanner

Lightweight security scanner for WordPress. Checks for outdated software, risky configurations, and applies safe hardening measures.

WPFastSec

<p>HT Security is a complete security suite for WordPress, offering multiple layers of protection for your website.</p>
<p><strong>Important – External Service:</strong><br />
This plugin queries the National Vulnerability Database (NVD) API to check for known CVE vulnerabilities. Requests are made to:<br />
* API URL: https://services.nvd.nist.gov/rest/json/cves/2.0<br />
* Terms of Use: https://nvd.nist.gov/general/legal-disclaimer<br />
* Privacy Policy: https://www.nist.gov/privacy-policy<br />
* Frequency: Automatic check every 12 hours or manual on-demand<br />
* Data sent: Name and version of WordPress/installed plugins (no personal data is sent)</p>
<p>The NVD API query is essential for the plugin’s CVE vulnerability detection functionality.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Security Headers</strong> – HSTS, X-Frame-Options, Content-Security-Policy, and more</li>
<li><strong>Login Alerts</strong> – Email notifications for successful and failed login attempts with rate limiting</li>
<li><strong>Core Integrity Check</strong> – Verify WordPress core files against official checksums with 24h cache</li>
<li><strong>CVE Vulnerability Detection</strong> – Check WordPress Core and active plugins against NVD database</li>
<li><strong>User Enumeration Protection</strong> – Block user enumeration via REST API and author parameters</li>
<li><strong>Maintenance Mode</strong> – Maintenance mode with authorized IP whitelist (IPv4, IPv6, CIDR support)</li>
<li><strong>File Permissions Audit</strong> – Audit and automatic correction of critical file permissions</li>
<li><strong>Plugin Security Indicators</strong> – Visual badges on plugins page showing vulnerability status</li>
</ul>
<h4>CVE Detection Features</h4>
<ul>
<li>Integration with NVD (National Vulnerability Database) API 2.0</li>
<li>Check WordPress Core and active plugins for known vulnerabilities</li>
<li>Intelligent batch processing with rate limiting</li>
<li><strong>8 layers of anti-false-positive validation</strong></li>
<li>Vulnerability badges on plugins page (enable/disable option)</li>
<li>Dismissible alerts per user</li>
<li>Email notification when vulnerabilities are detected</li>
<li>Automatic check every 12 hours</li>
<li>NVD API Key support (increased rate limit)</li>
</ul>
<h4>Security Improvements in v1.5.0</h4>
<ul>
<li><strong>IP Spoofing Fix</strong> – Properly detects real IP behind Cloudflare, proxies, and load balancers</li>
<li><strong>Capability Check Fix</strong> – Authorization verified before processing</li>
<li><strong>Rate Limiting by IP</strong> – More granular rate limiting for login alerts</li>
<li><strong>Input Validation</strong> – Maximum length validation for feedback form</li>
</ul>
<h3>Supported Languages</h3>
<ul>
<li>English (US) – 100%</li>
<li>English (UK) – 100%</li>
<li>Português do Brasil – 100%</li>
<li>Português de Portugal – 100%</li>
<li>Español – 100%</li>
</ul>
<h3>License</h3>
<p>This plugin is licensed under the GNU General Public License v2.0 or later. For more information, visit https://www.gnu.org/licenses/gpl-2.0.html.</p>


HT Security


A quality security plugin! I recommend it


Perfect Plugin Security

Complete Security Suite: Security Headers, CVE Detection, Core Integrity Check, Login Alerts, and Maintenance Mode.

Aipatch Security Scanner vs HT Security