Md Jahid Shah

<p>BBH Security Insight runs a lightweight, read-only security audit on your WordPress installation and generates a professional Security Risk Report with color-coded risk levels (Critical, Warning, Safe), an overall security score (0–100), and detailed remediation recommendations.</p>
<p>This plugin is <strong>completely read-only</strong> — it never modifies files, never changes settings, and never sends data to external servers. It simply inspects your WordPress configuration and reports findings.</p>
<h4>Audit Checks Include</h4>
<ul>
<li><strong>WordPress Version Exposure</strong> — Detects if your WordPress version is exposed via readme.html or generator tags.</li>
<li><strong>Database Table Prefix</strong> — Checks if you are using the default <code>wp_</code> prefix.</li>
<li><strong>XML-RPC Status</strong> — Reports whether XML-RPC is enabled or disabled.</li>
<li><strong>DISALLOW_FILE_EDIT</strong> — Verifies if the built-in file editor is disabled.</li>
<li><strong>WP_DEBUG Status</strong> — Checks whether debug mode is active on production.</li>
<li><strong>Directory Browsing</strong> — Checks whether directory listing appears to be disabled.</li>
<li><strong>readme.html Exposure</strong> — Checks for the presence of the readme file.</li>
<li><strong>install.php Exposure</strong> — Checks if the installation script is accessible.</li>
<li><strong>wp-config.php Permissions</strong> — Verifies file permissions on this critical file.</li>
<li><strong>wp-content Permissions</strong> — Checks directory permissions on your content directory.</li>
<li><strong>User Enumeration Exposure</strong> — Checks for common user enumeration exposure patterns.</li>
<li><strong>Security Headers</strong> — Scans for CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, and X-Content-Type-Options.</li>
<li><strong>Uploads PHP Execution</strong> — Checks if PHP execution is blocked in the uploads directory.</li>
<li><strong>Admin Username</strong> — Detects if an administrator uses the default “admin” username.</li>
<li><strong>Malware Heuristics</strong> — Performs lightweight checks for suspicious code patterns in active plugin and theme PHP files.</li>
</ul>
<h4>Features</h4>
<ul>
<li>One-click “Run Security Audit” button on the admin dashboard.</li>
<li>Professional, color-coded Security Risk Report with score (0–100).</li>
<li>Human-readable explanations and remediation recommendations for every check.</li>
<li>Dismissible admin reminder notice.</li>
<li>Fully internationalized — ready for translation.</li>
<li>Secure AJAX with nonce verification and capability checks.</li>
<li>WordPress Coding Standards compliant.</li>
<li>No external dependencies — no Composer, no third-party APIs.</li>
<li>Read-only — never makes changes to your site.</li>
</ul>
<h4>Additional Resources</h4>
<p>Looking for additional WordPress security guidance? Visit <a href="https://jahidshah.com" rel="nofollow ugc">jahidshah.com</a> for documentation, security resources, and professional assistance.</p>
<h3>Support & Contact</h3>
<p>Need help or want to report an issue? Visit our support page or open a support ticket on the WordPress plugin repository.</p>
<ul>
<li>Website: https://jahidshah.com/</li>
<li>Support: https://wordpress.org/support/plugin/bbh-security-insight/</li>
</ul>
<h3>Other Plugins</h3>
<ul>
<li><a href="https://wordpress.org/plugins/bbh-custom-schema/" rel="ugc">BBH Custom Schema</a> – Add custom JSON-LD schema to your website</li>
<li><a href="https://wordpress.org/plugins/bbh-seo-toolkit/" rel="ugc">BBH SEO Toolkit</a> – Advanced SEO & Structured Data Engine</li>
<li><a href="https://wordpress.org/plugins/aj-faq-block/" rel="ugc">AJ FAQ Block</a> – Display FAQs with a beautiful block</li>
<li><a href="https://wordpress.org/plugins/aj-card-element/" rel="ugc">AJ Card Element</a> – Display content in beautiful cards</li>
<li><a href="https://wordpress.org/plugins/aj-square-testimonial-slider/" rel="ugc">AJ Square Testimonial Slider</a> – Showcase testimonials in a slider</li>
<li><a href="https://wordpress.org/plugins/aj-category-posts/" rel="ugc">AJ Category Posts</a> – Display posts by category</li>
<li><a href="https://wordpress.org/plugins/ajx-filter-for-woo/" rel="ugc">AJx Filter for WooCommerce</a> – Advanced product filtering for WooCommerce</li>
</ul>


BBH Security Insight

Lightweight, read-only WordPress security audits with risk scoring, security checks, and actionable recommendations.

Freemius

Lars Koudal

cleverplugins

<p>Security Ninja helps you identify vulnerabilities and harden the security of your WordPress websites. Paired with MainWP, you can now manage and monitor all your connected sites from one central location.</p>
<p>This MainWP extension brings Security Ninja into your MainWP dashboard so you can manage and monitor all connected sites from one place.</p>
<p><strong>Free version:</strong> Run Security Ninja’s Security Tests and Core Scanner remotely on one or more child sites. View results for all connected sites: vulnerabilities (plugins and themes), Security Tests table, Core Scanner summary, and Malware Scanner summary (last run and count when scans are available on the child site). The Security Ninja column in the MainWP Sites table shows test score and vulnerability count. The extension main page is the All Events overview (with a Pro upsell message for free users).</p>
<p><strong>Pro version:</strong> Everything in Free, plus: remote Malware Scanner (included when you use “Run all security scans” or dedicated malware scan actions, on Pro child sites); unified events log with filters and search; full malware scan file list on the per-site tab; White Label bulk action to manage child site settings; Update database tables (bulk and per-site); Pro Reports tokens for Security Ninja data. Event logs and full malware details require Security Ninja Pro on child sites.</p>
<p>Note:<br />
To view event logs and scan data, your child sites must have Security Ninja Pro installed. You can still monitor free sites from the MainWP dashboard, but features like event logging only work if those sites also have premium features enabled. The “Update database tables” action requires Security Ninja 5.271 or newer on the child site. Remote IP management and enriched event details require Security Ninja 5.285+ on child sites and Security Ninja for MainWP 2.1.0+ on the dashboard.</p>
<p>This extension helps you save time, stay in control, and manage security across all your sites—whether you’re handling a handful or hundreds.</p>
<p>MainWP is an invaluable tool for those who manage multiple WordPress websites.</p>
<p>To combine the two, you need to install this extension on your master MainWP website.</p>
<h3>Links and Documentation</h3>
<ul>
<li>
<p><a href="https://wpsecurityninja.com/mainwp/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=SecNin&utm_content=plugin+repo" rel="nofollow ugc">Security Ninja for MainWP Extension Page</a></p>
</li>
<li>
<p><a href="https://wpsecurityninja.com/docs/mainwp/get-started-mainwp/?utm_source=wordpress.org&utm_medium=referral&utm_campaign=SecNin&utm_content=plugin+repo" rel="nofollow ugc">Get Started with MainWP and Security Ninja</a></p>
</li>
</ul>
<h3>Install the Security Ninja MainWP extension from within the MainWP dashboard</h3>
<ol>
<li>Login to your MainWP dashboard</li>
<li>Navigate to WP > Plugins</li>
<li>Search for ‘Security Ninja MainWP’</li>
<li>Install and activate the plugin</li>
</ol>
<h3>Install the Security Ninja MainWP extension manually</h3>
<ol>
<li>Download the plugin</li>
<li>Login to your MainWP dashboard</li>
<li>Navigate to WP > Plugins</li>
<li>Click Add New and then Upload Plugin</li>
<li>Browse to the file, select it and click Install Now</li>
<li>Click Activate Plugin once prompted.</li>
</ol>


Security Ninja For MainWP

See Security Ninja vulnerabilities and security test results in your MainWP dashboard.

BBH Security Insight vs Security Ninja For MainWP