Joseph Mendez

FP Site Security is a self-contained WordPress security plugin. It runs entirely on your own site — no external dashboards, no license servers, no cloud sync.
Features:
<ul>
<li>Login protection — brute-force lockout, optional TOTP two-factor authentication</li>
<li>Firewall — built-in rules and request blocking</li>
<li>DDoS rate limiting</li>
<li>Near-real-time malware scanning with signature and heuristic detection</li>
<li>File integrity monitoring</li>
<li>Optional WordPress.org checksum verification</li>
<li>Optional outdated plugin/theme/core checks</li>
<li>Quarantine and guided cleanup</li>
<li>Local + scheduled backups</li>
<li>Activity log and reports</li>
<li>Admin email alerts</li>
</ul>
<h3>External services</h3>
This plugin connects to a small number of third-party services. All of them are optional and only contacted when you turn them on, supply credentials, or opt in to a feature that explicitly depends on that service.
WordPress.org (checksum and update verification, optional) — Only contacted if you enable WordPress.org verification lookups in the plugin settings. When enabled, the plugin requests WordPress core checksums and update metadata from <code>api.wordpress.org</code>. No personal data is sent. wordpress.org Privacy: https://wordpress.org/about/privacy/.
Google reCAPTCHA (optional) — Only contacted if you enable reCAPTCHA on login/register/password-reset and supply your own site keys. The plugin loads <code>https://www.google.com/recaptcha/api.js</code> on the login page and submits responses to <code>https://www.google.com/recaptcha/api/siteverify</code>. Google reCAPTCHA Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy.
Slack (optional) — Only contacted if you enable Slack notifications and configure a webhook URL. Security events are posted to the webhook you supply.
Sentry (optional) — Only contacted if you enable Sentry notifications and configure a Sentry DSN. Critical events are posted to the Sentry endpoint encoded in your DSN.
<h3>Filesystem scope</h3>
The plugin only writes to the database and a small set of clearly named directories under <code>wp-content/uploads/</code>. It never asks users to edit plugin files, and it does not store runtime data in its own plugin folder. Every write below is gated behind an admin nonce or a WordPress cron event — there is no path that an unauthenticated visitor can use to write to disk.
<ul>
<li><code>wp-content/uploads/firssise-backups/</code> — created by the local-backup feature when scheduled or manual backups are run. Contains the generated <code>.zip</code> archives. Backups are NOT removed on uninstall (that’s your data); delete the folder manually if you don’t want them.</li>
<li><code>wp-content/uploads/firssise-logs/</code> — internal error log written by the plugin’s own error-capture handlers when the “Monitor PHP error log” option is enabled. The directory gets a blank <code>index.html</code> and a restrictive <code>.htaccess</code> file when supported by the server.</li>
<li>Quarantine records are stored in the WordPress database. Flagged files are deleted from disk when quarantined instead of being copied into the plugin directory or a public uploads subfolder.</li>
</ul>
The plugin reads many other paths (WordPress core files, other plugins, themes, uploads) for integrity scanning and malware detection, but it does not write to them.

FP Site Security

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

migrate

<h3>TL;DR:</h3>
<ul>
<li>🚀 Lightning fast backups </li>
<li>🪶 Lightweight – just over 1MB </li>
<li>⚡ Super-quick migration with only a few clicks </li>
<li>🎯 Incredibly easy to use – no tech skills required </li>
<li>☁️ Many free storage options: Google Drive, Dropbox, OneDrive, pCloud, Amazon S3 & more </li>
<li>🔒 Exclusive own storage solution with 1GB of free space – unique on the market! </li>
</ul>
👉 <a href="https://demo.tastewp.com/bmi" rel="nofollow ugc">Try it out instantly on a live demo</a>
—
Creating a backup of your site has never been easier!
Simply install the plugin, click on “Create backup now” – done.
Website migration is just as easy and FREE, with just two clicks!
Wide range of available cloud storage locations: Google Drive, Dropbox, OneDrive, Amazon S3, Wasabi, pCloud, SFTP & FTP, and free cloud storage BackupBliss.
You can also schedule backups, e.g. define that a backup should be taken automatically every week (or every day/month).
Use a wide choice of configuration options:
<ul>
<li>Define exactly which files / databases should be in the backup, and which should not</li>
<li>Define where the backup will be stored (store locally and/or backup to cloud)</li>
<li>Define what name your backup should have, in which instances you should receive a notification email, and much more</li>
<li>Additional advanced features included in the premium: smart exclusion rules, Tar and GZip compression methods, full email notifications, automatic backups before updates, and more.</li>
</ul>
This plugin is all in one solution if you need to migrate your site to another host or just restore the local backup.
Note: This (free) version is limited to backups of 4GB in size, due to native WordPress ZIP limitations. For unlimited sizes and increased stability for larger sites, please have a look at the <a href="https://backupbliss.com" rel="nofollow ugc">Premium Plugin</a>. The code of this free plugin is licensed under <a href="https://www.gnu.org/licenses/gpl-3.0.en.html" rel="nofollow ugc">GPLv3</a>, however, we claim rights to other content. Please read the full <a href="https://backupbliss.com/terms" rel="nofollow ugc">Terms of Use</a> that touch other points as well and apply in entirety.
If any questions come up, please ask us in the <a href="https://wordpress.org/support/plugin/backup-backup" rel="ugc">Support Forum</a> – we’re always happy to help!

Backup Migration

Our hosting does daily backups but it is always nice to have a tool that can quickly make a backup on demand. This plugin is what we need

Really easy backups

I have been using your plugin often and I am quite satisfied. Many thnaks guys. Indeed beautiful development you did.

Thanks
Shiv

Always awesome

It worked perfectly for me. Thank you very much for a great plugin.

Worked as promised.

Simple and Fast


...and it's very well built. Solid backup plugin!


Works Like a Charm...


This plugin was handy in my scenario because other similar plugins with big names in the market were not useful to me even migrating a site with a size less than 50 MB some had limits and others had migration available in the premium version.



The free version of this plugin helped me a lot. Thanks to the Developers. 


Best option in market


Well, I will only say that, this plugin is far more better then other plugins on the web. very fast and smooth migration. Highly recommend. Keep up the good work guys. :)  


Awesome Plugin!!!


Its good plugin for backup compared to others.


Its good plugin for backup


Seriously, this free plugin beats even the premium alternatives.Thanks, Inisev! 🏆



A tip for people moving away from WP Engine:By default, they place some files in the /wp-content/ directory might break the import process on the new server.This can be avoided by deleting anything under /wp-content/mu-plugins/ that you haven't inserted yourself.In my case, I also had to remove /wp-content/object-cache.php


simply the best 👌


I know it doesn't look the "WP" way, but I like the look of this plugin.Nice and easy to use. The only thing I would say is that if you run out of space it doesn't really say that. so check that if it doesn't backup.






Nice plugin, nice design

Backup, migrate, and create staging sites with free cloud storage and support.

FP Site Security vs Backup Migration