bearmor

Bearmor Security
Professional WordPress security plugin with comprehensive malware protection, file integrity monitoring, and login security. Almost entirely free, with optional PRO features for advanced needs.
<h3>Core Features (100% Free)</h3>
Malware Scanner 
– Deep file scanning for backdoors, web shells, and malicious code 
– Pattern matching and heuristic detection 
– One-click quarantine for threats 
– Whitelist false positives 
– Scans plugins, themes, uploads, and core files
File Integrity Monitoring 
– Real-time tracking of all file changes 
– Detailed change logs showing what, when, and where 
– Instant quarantine for suspicious modifications 
– Mark legitimate changes as safe
Login Security 
– Brute force protection with automatic IP blocking 
– Complete login activity log 
– Geographic tracking for login attempts 
– Two-factor authentication (2FA) via email
Security Hardening 
– One-click hardening for common vulnerabilities 
– Disable XML-RPC, file editing, and directory browsing 
– Hide WordPress version and login errors 
– Enforce strong passwords 
– Simple toggle controls
Firewall 
– Web application firewall blocks SQL injection, XSS, and command injection 
– Rate limiting to prevent DDoS attacks 
– Country blocking with geo-IP detection 
– Honeypot protection for forms
Activity Logging 
– Track all administrative actions 
– Filter by user, action type, or date 
– Essential audit trail for multi-user sites
Security Dashboard 
– Clear overview of security status 
– Letter-grade security score (A-F) 
– Threat alerts and recommendations 
– Clean, focused interface
<h3>Optional PRO Features</h3>
The free version provides complete security protection. PRO adds optional enhancements:
<ul>
<li>Vulnerability Scanner – Automated CVE checks for plugins and themes</li>
<li>AI Security Analysis – Plain-English explanations of security issues</li>
<li>Uptime Monitoring – 24/7 external monitoring with instant alerts</li>
</ul>
<a href="https://bearmor.eu/bearmor-security-plugin/" rel="nofollow ugc">Learn more about PRO features</a>
<h3>Why Bearmor?</h3>
Most Powerful Free Tier 
Unlike competitors, Bearmor includes malware scanning, file monitoring, firewall, quarantine, and 2FA in the free version. Features other plugins lock behind paid plans are free here.
Performance Focused 
Efficient scanning with minimal server impact. No bloat, no unnecessary features.
Professional Interface 
Clean dashboard that shows what matters. No confusion, no clutter.
Privacy Respected 
Free users only send basic registration data (URL + email). Security scan data stays on your server unless you enable PRO AI analysis.
<h3>Quick Start</h3>
<ol>
<li>Install and activate Bearmor Security</li>
<li>Run your first malware scan from the dashboard</li>
<li>Enable recommended hardening options</li>
<li>Set up 2FA for your account</li>
</ol>
No configuration required. Works immediately.
<h3>External Services</h3>
Free Users: 
– Bearmor API (bearmor.eu) – License verification and registration 
– WordPress.org API – Core file integrity checks 
– IP-API.com – Geographic data for login tracking
PRO Users (additional): 
– Bearmor API – Uptime monitoring and vulnerability data 
– OpenAI API – AI security analysis
All connections use HTTPS encryption. No security scan data leaves your server in the free version.
<a href="https://bearmor.eu/privacy" rel="nofollow ugc">Privacy Policy</a> 
<a href="https://bearmor.eu/terms" rel="nofollow ugc">Terms of Service</a>
<h3>Support</h3>
<ul>
<li><a href="https://bearmor.eu/docs" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://wordpress.org/support/plugin/bearmor-security" rel="ugc">Support Forum</a></li>
<li>Email: security@bearmor.eu (PRO users receive priority support)</li>
</ul>
<h3>Privacy & Data</h3>
Free Users: 
– Site URL (installation identifier) 
– Admin email (security notifications) 
– Plugin version (update checks)
PRO Users (additional): 
– Security scan results (AI analysis only) 
– Uptime monitoring data (ping responses)
We Never: 
– Sell data to third parties 
– Track website visitors 
– Store passwords or sensitive user data 
– Share data without explicit consent
Data is encrypted in transit, stored on EU servers, and automatically deleted after 90 days. Request data deletion anytime at security@bearmor.eu.
<a href="https://bearmor.eu/privacy" rel="nofollow ugc">Full Privacy Policy</a>

Bearmor Security

Lightweight, powerful WordPress security for small and medium businesses. Malware scanning, login protection, 2FA, hardening & more.

Nikola (FirePhage)

FirePhage Security helps you monitor WordPress security locally with malware scanning, official checksum verification, login protection, update visibility, and optional FirePhage dashboard connectivity.
FirePhage Security includes:
<ul>
<li>local health and hardening checks</li>
<li>WordPress core checksum verification</li>
<li>plugin and theme repository integrity verification</li>
<li>background malware scanning</li>
<li>optional paid FirePhage dashboard connection for report sync and alerts</li>
</ul>
<h3>Licensing</h3>
FirePhage Security is licensed under GPLv2 or later.
All code and assets bundled inside this plugin are either:
<ul>
<li>original FirePhage plugin files released under GPLv2 or later</li>
<li>or GPL-compatible third-party assets documented below</li>
</ul>
Bundled third-party asset:
<ul>
<li>Choices.js</li>
<li>Source: https://github.com/Choices-js/Choices</li>
<li>License: MIT</li>
<li>Purpose: searchable country and continent dropdowns in the WordPress admin UI</li>
<li>Copyright: Josh Johnson and contributors</li>
</ul>
Choices.js is distributed under the MIT License, which is GPL-compatible.
<h3>External services</h3>
This plugin can contact external services in three cases.
<ol>
<li>Public checksum verification 
By default, the plugin requests WordPress.org plugin and theme checksum metadata directly from WordPress.org.</li>
</ol>
If the site owner explicitly enables the optional FirePhage checksum cache in Scanner Settings or during first-run setup, the plugin requests the same checksum metadata from FirePhage first and then falls back to WordPress.org if needed. These requests send only the package type, slug, and version needed for checksum verification.
When you manually choose Compare or Restore for an official WordPress.org checksum mismatch, the plugin may request the matching reference file through FirePhage so it can show a file comparison or restore the official file you selected. This happens only after a user action and is not part of normal background scanning.
FirePhage is used as a retrieval layer for official WordPress.org reference files; the plugin does not execute arbitrary remote code.
Service: https://firephage.com 
Privacy policy: https://firephage.com/privacy 
Terms: https://firephage.com/terms
<ol>
<li>Optional free FirePhage signature token 
If the site owner explicitly requests a free FirePhage signature token, the plugin sends the chosen email address, site URL details, plugin version, and optional marketing-consent preference to FirePhage so the token can be emailed and remote signature updates can be enabled.</li>
</ol>
Service: https://firephage.com 
Privacy policy: https://firephage.com/privacy 
Terms: https://firephage.com/terms
<ol>
<li>Optional paid FirePhage connection 
If the site owner explicitly connects the plugin to FirePhage, the plugin sends site connection details and security reports to FirePhage so dashboard sync and alerting can work.</li>
</ol>
Service: https://firephage.com 
Privacy policy: https://firephage.com/privacy 
Terms: https://firephage.com/terms

FirePhage Security

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

Bearmor Security vs FirePhage Security