Joseph Mendez

<p>FP Site Security is a self-contained WordPress security plugin. It runs entirely on your own site — no external dashboards, no license servers, no cloud sync.</p>
<p>Features:</p>
<ul>
<li>Login protection — brute-force lockout, optional TOTP two-factor authentication</li>
<li>Firewall — built-in rules and request blocking</li>
<li>DDoS rate limiting</li>
<li>Near-real-time malware scanning with signature and heuristic detection</li>
<li>File integrity monitoring</li>
<li>Optional WordPress.org checksum verification</li>
<li>Optional outdated plugin/theme/core checks</li>
<li>Quarantine and guided cleanup</li>
<li>Local + scheduled backups</li>
<li>Activity log and reports</li>
<li>Admin email alerts</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to a small number of third-party services. All of them are optional and only contacted when you turn them on, supply credentials, or opt in to a feature that explicitly depends on that service.</p>
<p><strong>WordPress.org (checksum and update verification, optional)</strong> — Only contacted if you enable WordPress.org verification lookups in the plugin settings. When enabled, the plugin requests WordPress core checksums and update metadata from <code>api.wordpress.org</code>. No personal data is sent. wordpress.org Privacy: https://wordpress.org/about/privacy/.</p>
<p><strong>Google reCAPTCHA (optional)</strong> — Only contacted if you enable reCAPTCHA on login/register/password-reset and supply your own site keys. The plugin loads <code>https://www.google.com/recaptcha/api.js</code> on the login page and submits responses to <code>https://www.google.com/recaptcha/api/siteverify</code>. Google reCAPTCHA Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy.</p>
<p><strong>Slack (optional)</strong> — Only contacted if you enable Slack notifications and configure a webhook URL. Security events are posted to the webhook you supply.</p>
<p><strong>Sentry (optional)</strong> — Only contacted if you enable Sentry notifications and configure a Sentry DSN. Critical events are posted to the Sentry endpoint encoded in your DSN.</p>
<h3>Filesystem scope</h3>
<p>The plugin only writes to the database and a small set of clearly named directories under <code>wp-content/uploads/</code>. It never asks users to edit plugin files, and it does not store runtime data in its own plugin folder. Every write below is gated behind an admin nonce or a WordPress cron event — there is no path that an unauthenticated visitor can use to write to disk.</p>
<ul>
<li><code>wp-content/uploads/firssise-backups/</code> — created by the local-backup feature when scheduled or manual backups are run. Contains the generated <code>.zip</code> archives. Backups are NOT removed on uninstall (that’s your data); delete the folder manually if you don’t want them.</li>
<li><code>wp-content/uploads/firssise-logs/</code> — internal error log written by the plugin’s own error-capture handlers when the “Monitor PHP error log” option is enabled. The directory gets a blank <code>index.html</code> and a restrictive <code>.htaccess</code> file when supported by the server.</li>
<li>Quarantine records are stored in the WordPress database. Flagged files are deleted from disk when quarantined instead of being copied into the plugin directory or a public uploads subfolder.</li>
</ul>
<p>The plugin reads many other paths (WordPress core files, other plugins, themes, uploads) for integrity scanning and malware detection, but it does not write to them.</p>


FP Site Security

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

SSL HTTPS Support

WP Encryption SSL

Backup Bolt

<p>Backup Bolt is the easiest and simplest one click backup plugin you could ever find!. Now take a custom backup with minimal storage consumption or backup your full WordPress site with a click of button!. Clutter free straight forward interface. Download backup with zip compression.</p>
<h3>BACKUP FEATURES</h3>
<ul>
<li>Super easy backup interface</li>
<li>Custom backup for minimal storage consumption</li>
<li>Full WordPress backup</li>
<li>Backup size v/s Free memory calculation</li>
<li>PCLZIP based faster backup process</li>
<li>Realtime process logging during backup</li>
<li>Generate large backups within seconds</li>
<li>Download the backup in zip format</li>
<li>Backups are auto deleted daily for storage consumption</li>
</ul>
<h4>Show Your Support</h4>
<ul>
<li>Rate Plugin – If you find this plugin useful, please leave a <a href="https://wordpress.org/support/plugin/backup-bolt/reviews/" rel="ugc">positive review</a>. Your reviews are our biggest motivation for further development of the plugin.</li>
<li>Submit a Bug – If you find any issue, please submit a bug via support forum.</li>
</ul>
<p>Thanks to <a href="https://sweetalert2.github.io/" rel="nofollow ugc">SweetAlert2</a> for beautiful alert box script.</p>


Super simple one click backup your site and download the backup in compressed zip format. Choose between custom or full WordPress backup.

FP Site Security vs Backup Bolt