Akshay Vasoya

<p>Anonindo Security Advisor helps site owners understand and improve their WordPress security posture without acting like a full firewall suite.</p>
<p>The plugin follows a simple workflow:</p>
<ul>
<li>Scan for common WordPress security issues and misconfigurations</li>
<li>Explain what each issue means in beginner-friendly language</li>
<li>Show practical guidance and safer best practices</li>
<li>Offer safe auto-fix actions for selected hardening steps</li>
</ul>
<p>This plugin is designed to be lightweight, educational, and operationally safe.</p>
<h3>Features</h3>
<ul>
<li>Detects debug mode enabled in production</li>
<li>Detects dashboard file editing enabled</li>
<li>Detects XML-RPC exposure</li>
<li>Detects weak file permissions on common paths</li>
<li>Detects potentially exposed <code>wp-config.php</code> backup patterns</li>
<li>Detects outdated plugins and themes</li>
<li>Detects suspicious administrator account patterns</li>
<li>Detects REST API user enumeration exposure</li>
<li>Heuristically scans active theme and plugin PHP files for basic SQL injection and XSS risk patterns</li>
<li>Scans selected database content for suspicious script-like patterns</li>
<li>Provides a security score and prioritized recommendations</li>
<li>Includes an activity log for meaningful security-related site events</li>
<li>Supports safe auto-fixes for selected hardening improvements</li>
</ul>


Anonindo Security Advisor

Lightweight WordPress security coach for scanning risks, explaining issues clearly, and guiding safer site improvements.

Vladimir Marusic

<p>Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.</p>
<p>Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.</p>
<p>This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).</p>
<p>Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.</p>
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
<p>The PRO edition is a separate commercial plugin (not included in this WordPress.org build).<br />
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a></p>
<h3>External Services</h3>
<p>This plugin may perform outbound network requests in the following cases:</p>
<p>1) WordPress.org Core Checksums API (FREE: Core Integrity Scan)<br />
* Service provider: WordPress.org<br />
* Endpoint: https://api.wordpress.org/core/checksums/1.0/<br />
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner.<br />
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request.<br />
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded.<br />
* Privacy: https://wordpress.org/about/privacy/</p>
<p>2) Freemius (optional: licensing, updates, opt-in telemetry)<br />
* Service provider: Freemius (freemius.com)<br />
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates).<br />
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius.<br />
* Data received: License status and update metadata needed to deliver plugin updates.<br />
* Terms: https://freemius.com/terms/<br />
* Privacy: https://freemius.com/privacy/</p>
<p>3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles)<br />
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a><br />
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates).<br />
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP).<br />
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded.<br />
* Terms: https://mh.ie/terms<br />
* Privacy: https://mh.ie/privacy-policy</p>
<h3>Privacy</h3>
<p>Maroon Horizon Smart Firewall is designed to minimize data sharing.</p>
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>


Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

Anonindo Security Advisor vs Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking