Nikola (FirePhage)

<p>FirePhage Security helps you monitor WordPress security locally with malware scanning, official checksum verification, login protection, update visibility, and optional FirePhage dashboard connectivity.</p>
<p>FirePhage Security includes:</p>
<ul>
<li>local health and hardening checks</li>
<li>WordPress core checksum verification</li>
<li>plugin and theme repository integrity verification</li>
<li>background malware scanning</li>
<li>optional paid FirePhage dashboard connection for report sync and alerts</li>
</ul>
<h3>Licensing</h3>
<p>FirePhage Security is licensed under GPLv2 or later.</p>
<p>All code and assets bundled inside this plugin are either:</p>
<ul>
<li>original FirePhage plugin files released under GPLv2 or later</li>
<li>or GPL-compatible third-party assets documented below</li>
</ul>
<p>Bundled third-party asset:</p>
<ul>
<li>Choices.js</li>
<li>Source: https://github.com/Choices-js/Choices</li>
<li>License: MIT</li>
<li>Purpose: searchable country and continent dropdowns in the WordPress admin UI</li>
<li>Copyright: Josh Johnson and contributors</li>
</ul>
<p>Choices.js is distributed under the MIT License, which is GPL-compatible.</p>
<h3>External services</h3>
<p>This plugin can contact external services in three cases.</p>
<ol>
<li>Public checksum verification<br />
By default, the plugin requests WordPress.org plugin and theme checksum metadata directly from WordPress.org.</li>
</ol>
<p>If the site owner explicitly enables the optional FirePhage checksum cache in Scanner Settings or during first-run setup, the plugin requests the same checksum metadata from FirePhage first and then falls back to WordPress.org if needed. These requests send only the package type, slug, and version needed for checksum verification.</p>
<p>When you manually choose Compare or Restore for an official WordPress.org checksum mismatch, the plugin may request the matching reference file through FirePhage so it can show a file comparison or restore the official file you selected. This happens only after a user action and is not part of normal background scanning.</p>
<p>FirePhage is used as a retrieval layer for official WordPress.org reference files; the plugin does not execute arbitrary remote code.</p>
<p>Service: https://firephage.com<br />
Privacy policy: https://firephage.com/privacy<br />
Terms: https://firephage.com/terms</p>
<ol>
<li>Optional free FirePhage signature token<br />
If the site owner explicitly requests a free FirePhage signature token, the plugin sends the chosen email address, site URL details, plugin version, and optional marketing-consent preference to FirePhage so the token can be emailed and remote signature updates can be enabled.</li>
</ol>
<p>Service: https://firephage.com<br />
Privacy policy: https://firephage.com/privacy<br />
Terms: https://firephage.com/terms</p>
<ol>
<li>Optional paid FirePhage connection<br />
If the site owner explicitly connects the plugin to FirePhage, the plugin sends site connection details and security reports to FirePhage so dashboard sync and alerting can work.</li>
</ol>
<p>Service: https://firephage.com<br />
Privacy policy: https://firephage.com/privacy<br />
Terms: https://firephage.com/terms</p>


FirePhage Security

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

Fortressx

<p>FortressX Security helps protect WordPress websites with practical security tools designed for site owners, freelancers, agencies and WooCommerce stores.</p>
<p>The plugin focuses on the security tasks that matter most in day-to-day WordPress administration: login protection, request filtering, file integrity monitoring, security hardening, security reporting and clear visibility into the security status of your website.</p>
<p>FortressX is designed to be easy to understand and manage without overwhelming users with unnecessary complexity.</p>
<h4>Key Features</h4>
<ul>
<li>Login protection and brute-force mitigation</li>
<li>Firewall and request protection tools</li>
<li>XML-RPC protection</li>
<li>REST API user enumeration protection</li>
<li>Security hardening recommendations</li>
<li>File integrity monitoring</li>
<li>Malware and security scanning tools</li>
<li>Security reports and status overview</li>
<li>Security event monitoring</li>
<li>Cloudflare integration tools</li>
<li>Maintenance and cleanup utilities</li>
<li>Modern and easy-to-use administration interface</li>
</ul>
<h4>Who Is FortressX For?</h4>
<p>FortressX Security is suitable for:</p>
<ul>
<li>Website owners</li>
<li>Freelancers</li>
<li>Agencies</li>
<li>WooCommerce stores</li>
<li>Business websites</li>
<li>Managed WordPress environments</li>
</ul>
<p>Whether you manage a single website or multiple client projects, FortressX provides a practical set of security tools to help monitor and improve the security posture of your WordPress installation.</p>
<h4>Optional Pro Add-on</h4>
<p>A separate commercial add-on may be available outside WordPress.org.</p>
<p>The free WordPress.org version remains fully functional and does not require a license key to use any of its included features.</p>
<p>The optional Pro add-on may provide additional security intelligence, monitoring capabilities, agency-oriented tools and other premium services.</p>
<h4>Data Handling and Privacy</h4>
<p>FortressX Security performs security-related checks within the local WordPress installation.</p>
<p>The plugin stores security settings, scan results, monitoring information, logs and security-related status data locally to provide security insights, reporting and administrative actions.</p>
<p>FortressX does not intentionally transmit WordPress user passwords, private content, customer order data or complete website files to external services.</p>
<h4>External Services</h4>
<p>Some optional features can connect to external services when enabled or configured by the site administrator.</p>
<h3>FortressX Intelligence Feed</h3>
<p>Purpose:<br />
Provides signed security intelligence updates and security-related rule data.</p>
<p>Data transmitted:</p>
<ul>
<li>Site URL or domain</li>
<li>Plugin version</li>
<li>Technical environment information required for compatibility and update delivery</li>
</ul>
<p>Used only when the related intelligence functionality is enabled.</p>
<p>Privacy Policy:<br />
https://fortressx-security.com/privacy/</p>
<h3>AbuseIPDB</h3>
<p>Purpose:<br />
Optional IP reputation checks for security and login protection features.</p>
<p>Data transmitted:</p>
<ul>
<li>IP address being checked</li>
<li>AbuseIPDB API credentials configured by the administrator</li>
</ul>
<p>Used only when enabled and configured by the administrator.</p>
<p>Terms:<br />
https://www.abuseipdb.com/legal</p>
<p>Privacy Policy:<br />
https://www.abuseipdb.com/privacy</p>
<h3>Cloudflare API</h3>
<p>Purpose:<br />
Optional Cloudflare-related security and cache management actions.</p>
<p>Data transmitted:</p>
<ul>
<li>Cloudflare account information configured by the administrator</li>
<li>Data required to perform the selected Cloudflare action</li>
</ul>
<p>Used only when enabled and configured by the administrator.</p>
<p>Terms:<br />
https://www.cloudflare.com/website-terms/</p>
<p>Privacy Policy:<br />
https://www.cloudflare.com/privacypolicy/</p>
<h4>Background Tasks</h4>
<p>FortressX Security may use WordPress scheduled tasks (WP-Cron) for security-related maintenance, monitoring and update operations.</p>
<p>These tasks are designed to run only when required by the enabled functionality.</p>


FortressX Security – Firewall, Security Scan & Hardening

FortressX Security helps protect WordPress with login protection, firewall tools, security checks, hardening guidance and file integrity monitoring.

FirePhage Security vs FortressX Security – Firewall, Security Scan & Hardening