gits229

CMS Watchman is a powerful WordPress plugin designed to enhance website security by monitoring and reporting vulnerabilities. It integrates seamlessly with the Watchman.bj platform to provide real-time insights, advanced analytics, and actionable recommendations to protect your website against emerging threats.
<h3>Key Features:</h3>
<ul>
<li>Real-time vulnerability detection: Monitors WordPress core, plugins, and themes for known issues.</li>
<li>Advanced reporting: Integration with Watchman.bj for detailed analytics and summaries.</li>
<li>User-friendly interface: Intuitive dashboard with alerts and action recommendations.</li>
<li>Automated notifications: Receive email alerts for critical security issues.</li>
<li>Scheduled reports: Automatically generates weekly security reports and allows manual report generation.</li>
<li>Regular updates: Ensures compatibility with the latest WordPress versions.</li>
</ul>
Whether you’re managing a personal blog or a complex multi-site installation, CMS Watchman empowers you with the tools and insights needed to maintain a secure WordPress environment.
<h3>External Services</h3>
This plugin connects to the “CMS Watchman” API to monitor installed plugins and themes for known vulnerabilities.
The following data is sent to the external service when the plugin is activated and when plugin/theme information is updated: 
– Plugin and theme names 
– Plugin and theme versions 
– WordPress version 
– Website URL (to send notifications about vulnerabilities)
This data is sent to the CMS Watchman API at: https://cms.api.watchman.bj/api/v1/
This service helps administrators stay informed about potential security risks.
CMS Watchman Privacy Policy: https://www.watchman.bj/docs/privacy-policy 
CMS Watchman Terms of Service: https://www.watchman.bj/docs/terms-conditions

CMS Watchman

CMS Watchman provides robust security monitoring for WordPress sites, detecting vulnerabilities and integrating seamlessly with Watchman.

WPFastSec

HT Security is a complete security suite for WordPress, offering multiple layers of protection for your website.
Important – External Service: 
This plugin queries the National Vulnerability Database (NVD) API to check for known CVE vulnerabilities. Requests are made to: 
* API URL: https://services.nvd.nist.gov/rest/json/cves/2.0 
* Terms of Use: https://nvd.nist.gov/general/legal-disclaimer 
* Privacy Policy: https://www.nist.gov/privacy-policy 
* Frequency: Automatic check every 12 hours or manual on-demand 
* Data sent: Name and version of WordPress/installed plugins (no personal data is sent)
The NVD API query is essential for the plugin’s CVE vulnerability detection functionality.
<h4>Key Features</h4>
<ul>
<li>Security Headers – HSTS, X-Frame-Options, Content-Security-Policy, and more</li>
<li>Login Alerts – Email notifications for successful and failed login attempts with rate limiting</li>
<li>Core Integrity Check – Verify WordPress core files against official checksums with 24h cache</li>
<li>CVE Vulnerability Detection – Check WordPress Core and active plugins against NVD database</li>
<li>User Enumeration Protection – Block user enumeration via REST API and author parameters</li>
<li>Maintenance Mode – Maintenance mode with authorized IP whitelist (IPv4, IPv6, CIDR support)</li>
<li>File Permissions Audit – Audit and automatic correction of critical file permissions</li>
<li>Plugin Security Indicators – Visual badges on plugins page showing vulnerability status</li>
</ul>
<h4>CVE Detection Features</h4>
<ul>
<li>Integration with NVD (National Vulnerability Database) API 2.0</li>
<li>Check WordPress Core and active plugins for known vulnerabilities</li>
<li>Intelligent batch processing with rate limiting</li>
<li>8 layers of anti-false-positive validation</li>
<li>Vulnerability badges on plugins page (enable/disable option)</li>
<li>Dismissible alerts per user</li>
<li>Email notification when vulnerabilities are detected</li>
<li>Automatic check every 12 hours</li>
<li>NVD API Key support (increased rate limit)</li>
</ul>
<h4>Security Improvements in v1.5.0</h4>
<ul>
<li>IP Spoofing Fix – Properly detects real IP behind Cloudflare, proxies, and load balancers</li>
<li>Capability Check Fix – Authorization verified before processing</li>
<li>Rate Limiting by IP – More granular rate limiting for login alerts</li>
<li>Input Validation – Maximum length validation for feedback form</li>
</ul>
<h3>Supported Languages</h3>
<ul>
<li>English (US) – 100%</li>
<li>English (UK) – 100%</li>
<li>Português do Brasil – 100%</li>
<li>Português de Portugal – 100%</li>
<li>Español – 100%</li>
</ul>
<h3>License</h3>
This plugin is licensed under the GNU General Public License v2.0 or later. For more information, visit https://www.gnu.org/licenses/gpl-2.0.html.

HT Security


A quality security plugin! I recommend it


Perfect Plugin Security

Complete Security Suite: Security Headers, CVE Detection, Core Integrity Check, Login Alerts, and Maintenance Mode.

CMS Watchman vs HT Security