Nikola (FirePhage)

FirePhage Security helps you monitor WordPress security locally with malware scanning, official checksum verification, login protection, update visibility, and optional FirePhage dashboard connectivity.
FirePhage Security includes:
<ul>
<li>local health and hardening checks</li>
<li>WordPress core checksum verification</li>
<li>plugin and theme repository integrity verification</li>
<li>background malware scanning</li>
<li>optional paid FirePhage dashboard connection for report sync and alerts</li>
</ul>
<h3>Licensing</h3>
FirePhage Security is licensed under GPLv2 or later.
All code and assets bundled inside this plugin are either:
<ul>
<li>original FirePhage plugin files released under GPLv2 or later</li>
<li>or GPL-compatible third-party assets documented below</li>
</ul>
Bundled third-party asset:
<ul>
<li>Choices.js</li>
<li>Source: https://github.com/Choices-js/Choices</li>
<li>License: MIT</li>
<li>Purpose: searchable country and continent dropdowns in the WordPress admin UI</li>
<li>Copyright: Josh Johnson and contributors</li>
</ul>
Choices.js is distributed under the MIT License, which is GPL-compatible.
<h3>External services</h3>
This plugin can contact external services in three cases.
<ol>
<li>Public checksum verification 
By default, the plugin requests WordPress.org plugin and theme checksum metadata directly from WordPress.org.</li>
</ol>
If the site owner explicitly enables the optional FirePhage checksum cache in Scanner Settings or during first-run setup, the plugin requests the same checksum metadata from FirePhage first and then falls back to WordPress.org if needed. These requests send only the package type, slug, and version needed for checksum verification.
When you manually choose Compare or Restore for an official WordPress.org checksum mismatch, the plugin may request the matching reference file through FirePhage so it can show a file comparison or restore the official file you selected. This happens only after a user action and is not part of normal background scanning.
FirePhage is used as a retrieval layer for official WordPress.org reference files; the plugin does not execute arbitrary remote code.
Service: https://firephage.com 
Privacy policy: https://firephage.com/privacy 
Terms: https://firephage.com/terms
<ol>
<li>Optional free FirePhage signature token 
If the site owner explicitly requests a free FirePhage signature token, the plugin sends the chosen email address, site URL details, plugin version, and optional marketing-consent preference to FirePhage so the token can be emailed and remote signature updates can be enabled.</li>
</ol>
Service: https://firephage.com 
Privacy policy: https://firephage.com/privacy 
Terms: https://firephage.com/terms
<ol>
<li>Optional paid FirePhage connection 
If the site owner explicitly connects the plugin to FirePhage, the plugin sends site connection details and security reports to FirePhage so dashboard sync and alerting can work.</li>
</ol>
Service: https://firephage.com 
Privacy policy: https://firephage.com/privacy 
Terms: https://firephage.com/terms

FirePhage Security

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

jee@madtek.com

Effective website security requires a combination of tools and best practices to operate WordPress safely on today’s internet. MadTek’s Entrusans IDS security plugin adds tamper-resistance to your security tool set.
Sophisticated hackers scan WordPress websites 24X7 looking for vulnerabilities and they know how to delete or disable security plugins to avoid detection. Whether a breach is due to a Zero-Day attack or a known vulnerability, once hackers gain access to your website, they own it.
Tamper-resistance is essential to expose hackers who disable your website’s security plugins. Until you remove all malicious code and remediate all malicious file deletions or changes your website remains compromised.
MadTek developed the Entrusans IDS plugin to help WordPress website owners restore their websites quickly after a breach. Remediating a hacked website can be a complex and costly forensic job. The Entrusans system gives you the tamper-resistant file change history you need to quickly identify deleted, added and changed files. MadTek encrypts and stores your file-change data on remote servers denying hackers the ability to go undetected.
If you have a mission-critical website e.g. eCommerce, you need to know ASAP if a hacker penetrates your website.
<h3>Manual Install</h3>
<ol>
<li>Download the madtek-entrusans.zip file from the link in the order complete email or from the account download webpage at http://services.madtek.com. Login is required to reach the download page.</li>
<li>Create the directory madtek-entrusans in the wp-content/plugins directory.</li>
<li>Upload madtek-entrusans plugin files to the /wp-content/plugins/madtek-entrusans directory.</li>
<li>Go to the Plugins screen on the WordPress dashboard and find the newly uploaded Entrusans IDS plugin.</li>
<li>Click Activate under the Entrusans IDS plugin.</li>
<li>Following successful WordPress activation find the Entrusans IDS menu item on the left navigation menu of the WordPress dashboard.</li>
<li>Click the Entrusans IDS menu item and when presented with the activation form enter the license key and email address from the order confirmation email received following purchase.</li>
<li>Click the activate button.</li>
<li>A First Poll email will signal the site has successfully been scanned for the first time.</li>
</ol>
<h3>WordPress Dashboard Install</h3>
<ol>
<li>Download the madtek-entrusans.zip file from the link in the order complete email or from the account download webpage at http://services.madtek.com. Login is required to reach the download page.</li>
<li>Proceed through the standard WordPress new plugin install steps in the WordPress plugins screen.</li>
<li>Find the newly uploaded Entrusans IDS plugin in the list of plugins.</li>
<li>Activate the plugin via the Activate link under the Entrusans IDS plugin entry.</li>
<li>Following successful WordPress activation find the Entrusans IDS menu item on the left navigation menu of the WordPress dashboard.</li>
<li>Click the Entrusans IDS menu item and when presented with the activation form enter the license key and email address from the order confirmation email received following purchase.</li>
<li>When presented with the activation form enter the license key and email address from the 
the email received following purchase.</li>
<li>Click the activate button.</li>
<li>A First Poll email will signal the site has successfully been scanned for the first time.</li>
</ol>

MadTek Entrusans ™ IDS client

Effective website security requires a combination of tools and best practices to operate WordPress safely on today’s internet.

FirePhage Security vs MadTek Entrusans ™ IDS client