Joseph Mendez

<p>FP Site Security is a self-contained WordPress security plugin. It runs entirely on your own site — no external dashboards, no license servers, no cloud sync.</p>
<p>Features:</p>
<ul>
<li>Login protection — brute-force lockout, optional TOTP two-factor authentication</li>
<li>Firewall — built-in rules and request blocking</li>
<li>DDoS rate limiting</li>
<li>Near-real-time malware scanning with signature and heuristic detection</li>
<li>File integrity monitoring</li>
<li>Optional WordPress.org checksum verification</li>
<li>Optional outdated plugin/theme/core checks</li>
<li>Quarantine and guided cleanup</li>
<li>Local + scheduled backups</li>
<li>Activity log and reports</li>
<li>Admin email alerts</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to a small number of third-party services. All of them are optional and only contacted when you turn them on, supply credentials, or opt in to a feature that explicitly depends on that service.</p>
<p><strong>WordPress.org (checksum and update verification, optional)</strong> — Only contacted if you enable WordPress.org verification lookups in the plugin settings. When enabled, the plugin requests WordPress core checksums and update metadata from <code>api.wordpress.org</code>. No personal data is sent. wordpress.org Privacy: https://wordpress.org/about/privacy/.</p>
<p><strong>Google reCAPTCHA (optional)</strong> — Only contacted if you enable reCAPTCHA on login/register/password-reset and supply your own site keys. The plugin loads <code>https://www.google.com/recaptcha/api.js</code> on the login page and submits responses to <code>https://www.google.com/recaptcha/api/siteverify</code>. Google reCAPTCHA Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy.</p>
<p><strong>Slack (optional)</strong> — Only contacted if you enable Slack notifications and configure a webhook URL. Security events are posted to the webhook you supply.</p>
<p><strong>Sentry (optional)</strong> — Only contacted if you enable Sentry notifications and configure a Sentry DSN. Critical events are posted to the Sentry endpoint encoded in your DSN.</p>
<h3>Filesystem scope</h3>
<p>The plugin only writes to the database and a small set of clearly named directories under <code>wp-content/uploads/</code>. It never asks users to edit plugin files, and it does not store runtime data in its own plugin folder. Every write below is gated behind an admin nonce or a WordPress cron event — there is no path that an unauthenticated visitor can use to write to disk.</p>
<ul>
<li><code>wp-content/uploads/firssise-backups/</code> — created by the local-backup feature when scheduled or manual backups are run. Contains the generated <code>.zip</code> archives. Backups are NOT removed on uninstall (that’s your data); delete the folder manually if you don’t want them.</li>
<li><code>wp-content/uploads/firssise-logs/</code> — internal error log written by the plugin’s own error-capture handlers when the “Monitor PHP error log” option is enabled. The directory gets a blank <code>index.html</code> and a restrictive <code>.htaccess</code> file when supported by the server.</li>
<li>Quarantine records are stored in the WordPress database. Flagged files are deleted from disk when quarantined instead of being copied into the plugin directory or a public uploads subfolder.</li>
</ul>
<p>The plugin reads many other paths (WordPress core files, other plugins, themes, uploads) for integrity scanning and malware detection, but it does not write to them.</p>


FP Site Security

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

deveasel

<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/TuEUNmztBGY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>FREE WORDPRESS TOOLKIT FOR DEMO IMPORT, BACKUP & SITE MIGRATION</h4>
<p><strong><a href="http://wpdemi.com/" rel="nofollow ugc">Demi</a></strong> is a powerful WordPress demo importer, backup, and site migration plugin designed to simplify website management. It allows you to import demo content, create full WordPress backups, and migrate websites between servers or domains directly from your dashboard.</p>
<p>The plugin combines demo importing, backup management, and WordPress site migration tools into a single lightweight solution, making it ideal for theme developers, agencies, freelancers, and WordPress website owners.</p>
<p>With Demi, you can quickly set up starter websites using demo imports, protect your site with reliable backups, and move or clone WordPress websites using an all-in-one migration system.</p>
<p><strong><a href="http://wpdemi.com/" rel="nofollow ugc">Visit Site</a></strong> | <strong><a href="https://wpdemi.com/docs/demo-importer-backup-site-migrator/" rel="nofollow ugc">Read Docs</a></strong></p>
<h3>🌟 Manage WordPress Websites Faster with Demi</h3>
<ul>
<li><strong><a href="https://wpdemi.com/docs/demo-importer-backup-site-migrator/user-guide/demo-import/" rel="nofollow ugc">One Click Demo Import</a></strong>: Instantly set up complete WordPress websites using Demi’s one click demo import system. Import pages, posts, media, widgets, menus, and theme settings to launch websites in minutes.</li>
<li><strong><a href="https://wpdemi.com/docs/demo-importer-backup-site-migrator/developer-guide/register-demos/" rel="nofollow ugc">Demo Importer for Themes</a></strong>: Perfect for theme developers and agencies, Demi allows you to provide starter sites and demo content imports directly inside your WordPress themes.</li>
<li><strong><a href="https://wpdemi.com/docs/demo-importer-backup-site-migrator/user-guide/site-migration/" rel="nofollow ugc">Site Migration</a></strong>: Easily migrate WordPress websites between domains or servers. Transfer database, plugins, themes, and media files with a streamlined migration process.</li>
<li><strong><a href="https://wpdemi.com/docs/demo-importer-backup-site-migrator/user-guide/backup-restore/" rel="nofollow ugc">Backup & Restore</a></strong>: Manage multiple website backups and restore your WordPress site quickly whenever needed.</li>
<li><strong><a href="https://wpdemi.com/docs/demo-importer-backup-site-migrator/user-guide/backup-restore/" rel="nofollow ugc">Hooks & Filters</a></strong>: Extend Demi with WordPress hooks and filters, allowing developers to integrate custom demo import workflows and advanced migration logic.</li>
</ul>
<h4>🗝️ Key features:</h4>
<ul>
<li><strong>No-Code Website Management</strong>: Manage demo imports, backups, and migrations without writing any code.</li>
</ul>


Demi – One Click Demo Import, Backup & Site Migration

Demi: Import demos, backup your data, and migrate sites. All from one clean, fast interface designed for modern WordPress workflows.

FP Site Security vs Demi – One Click Demo Import, Backup & Site Migration