Joseph Mendez

<p>FP Site Security is a self-contained WordPress security plugin. It runs entirely on your own site — no external dashboards, no license servers, no cloud sync.</p>
<p>Features:</p>
<ul>
<li>Login protection — brute-force lockout, optional TOTP two-factor authentication</li>
<li>Firewall — built-in rules and request blocking</li>
<li>DDoS rate limiting</li>
<li>Near-real-time malware scanning with signature and heuristic detection</li>
<li>File integrity monitoring</li>
<li>Optional WordPress.org checksum verification</li>
<li>Optional outdated plugin/theme/core checks</li>
<li>Quarantine and guided cleanup</li>
<li>Local + scheduled backups</li>
<li>Activity log and reports</li>
<li>Admin email alerts</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to a small number of third-party services. All of them are optional and only contacted when you turn them on, supply credentials, or opt in to a feature that explicitly depends on that service.</p>
<p><strong>WordPress.org (checksum and update verification, optional)</strong> — Only contacted if you enable WordPress.org verification lookups in the plugin settings. When enabled, the plugin requests WordPress core checksums and update metadata from <code>api.wordpress.org</code>. No personal data is sent. wordpress.org Privacy: https://wordpress.org/about/privacy/.</p>
<p><strong>Google reCAPTCHA (optional)</strong> — Only contacted if you enable reCAPTCHA on login/register/password-reset and supply your own site keys. The plugin loads <code>https://www.google.com/recaptcha/api.js</code> on the login page and submits responses to <code>https://www.google.com/recaptcha/api/siteverify</code>. Google reCAPTCHA Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy.</p>
<p><strong>Slack (optional)</strong> — Only contacted if you enable Slack notifications and configure a webhook URL. Security events are posted to the webhook you supply.</p>
<p><strong>Sentry (optional)</strong> — Only contacted if you enable Sentry notifications and configure a Sentry DSN. Critical events are posted to the Sentry endpoint encoded in your DSN.</p>
<h3>Filesystem scope</h3>
<p>The plugin only writes to the database and a small set of clearly named directories under <code>wp-content/uploads/</code>. It never asks users to edit plugin files, and it does not store runtime data in its own plugin folder. Every write below is gated behind an admin nonce or a WordPress cron event — there is no path that an unauthenticated visitor can use to write to disk.</p>
<ul>
<li><code>wp-content/uploads/firssise-backups/</code> — created by the local-backup feature when scheduled or manual backups are run. Contains the generated <code>.zip</code> archives. Backups are NOT removed on uninstall (that’s your data); delete the folder manually if you don’t want them.</li>
<li><code>wp-content/uploads/firssise-logs/</code> — internal error log written by the plugin’s own error-capture handlers when the “Monitor PHP error log” option is enabled. The directory gets a blank <code>index.html</code> and a restrictive <code>.htaccess</code> file when supported by the server.</li>
<li>Quarantine records are stored in the WordPress database. Flagged files are deleted from disk when quarantined instead of being copied into the plugin directory or a public uploads subfolder.</li>
</ul>
<p>The plugin reads many other paths (WordPress core files, other plugins, themes, uploads) for integrity scanning and malware detection, but it does not write to them.</p>


FP Site Security

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

SiteSkite

<p><strong><a href="https://www.siteskite.com/" rel="nofollow ugc">SiteSkite</a></strong> is a WebOps for WordPress site maintenance platform built for agencies, developers, and site owners who manage multiple websites.</p>
<p>With built-in <strong>AI Chat</strong> and <strong>MCP</strong>. SiteSkite goes beyond unline traditional site maintenance plugins to give you more power, automation, and visibility across all your sites. It allows you to <strong>create new websites from backups</strong>, use <strong>prebuilt blueprints</strong>, manage updates in bulk, monitor uptime, automate backups, and control everything from one centralized dashboard.</p>
<p>Whether you manage 1 site or 100+, SiteSkite simplifies WordPress maintenance and scales with your workflow.</p>
<p><strong>Important:</strong> SiteSkite only manages your website after you connect it using a secure API key.<br />
All plugin installation, activation, and maintenance actions must be initiated from your SiteSkite account — ensuring full control and secure access.</p>
<h3>What SiteSkite Helps You Do</h3>
<p>✔️ Manage multiple WordPress sites from one dashboard<br />
✔️ Automate backups & restore anytime<br />
✔️ SiteSkite AI: Privacy Safe-AI that manage your site<br />
✔️ SiteSkite MCP Server: Manage your sites directly from Claude.ai, ChatGPT, and Cursor AI.<br />
✔️ Advanced Site Recovery: Keep your site up & live even it has Fatal Error.<br />
✔️ Snapshot backup & incremental backup support<br />
✔️ Create blueprints for rapid deployment<br />
✔️ Launch sandbox site<br />
✔️ Spin new sites from existing backups (On SiteSkite servers)<br />
✔️ Store backups in your own cloud (BYO cloud)<br />
✔️ Vulerabilities detection guard<br />
✔️ Monitor uptime & site health across all sites<br />
✔️ Bulk update, activate, deactivate, and delete plugins/themes<br />
✔️ Roll back plugin/theme versions safely<br />
✔️ Add team members & organize sites into workspaces<br />
✔️ WP Canvas (Maintenance mode, Debug, Search & Replace, Indexing control, WP Reset & more)<br />
✔️ Manage WP Admin Users & Roles<br />
✔️ Track Core Web Vitals performance<br />
✔️ Install curated plugin presets with WP Essentials<br />
✔️ White-label the plugin for agency clients<br />
✔️ Automated Reports for your customers<br />
✔️ Preety logs view for Error, Debug and Custom logs<br />
✔️ White Lable plugin for your agency & customers<br />
✔️ and much more…</p>
<p>Built to simplify workflows and scale your WordPress operations without stress.</p>
<p><strong><a href="https://auth-platform.siteskite.com/register" rel="nofollow ugc">Get started</a></strong> in minutes.</p>
<h3>Key Features</h3>
<h4>Backups, Restore, Site Migrate/Clone</h4>
<p>Control overl on your site backups:<br />
– On-demand, daily, or weekly backups<br />
– Full, database-only, or file-only backups<br />
– <strong>Incremental backups</strong> (resource-efficient)<br />
– <strong>Classic snapshot backups</strong> (full archive)<br />
– Restore with a click<br />
– <strong>Migrate or Clone</strong>: Site from Server A to Server B</p>
<h4>BYO Cloud Storage</h4>
<p>Use your own cloud storage, including:<br />
– Google Drive<br />
– Dropbox<br />
– AWS S3<br />
– BackBlaze B2<br />
– pCloud</p>
<h4>BYO LLM</h4>
<p>Use your own AI Model:<br />
– ChatGPT<br />
– Claude<br />
– Custom ai model</p>
<h4>MCP</h4>
<p>SiteSkite MCP is now connect:<br />
– ChatGPT<br />
– Claude<br />
– Cursor</p>
<h4>Bulk WordPress Actions</h4>
<ul>
<li>Update plugins, themes, and core  </li>
<li>Activate/Deactivate/Delete plugins & themes  </li>
<li>Rollback plugin & theme versions  </li>
<li>Install bulk plugins from presets  </li>
</ul>
<h4>Builtin Native Features</h4>
<ul>
<li>Maintenance Mode  </li>
<li>WP Debug  </li>
<li>Search & Replace  </li>
<li>Permalink settings  </li>
<li>WP Reset  </li>
<li>Site Indexing toggle  </li>
</ul>
<h4>Performance & Monitoring</h4>
<ul>
<li>Uptime monitoring  </li>
<li>BirdEye status overview  </li>
<li>Core Web Vitals metrics  </li>
</ul>
<h4>Collaboration & Scaling</h4>
<ul>
<li>Workspaces to group sites & clients  </li>
<li>Add users, team members, and clients  </li>
<li>White-label plugin branding  </li>
</ul>
<h4>Marketplace</h4>
<ul>
<li>Browse tools, presets, and digital assets  </li>
<li>Wishlist & follow sellers  </li>
</ul>
<h3>1GB free space</h3>
<ul>
<li>Enjoy free cloud storage for your site backup</li>
</ul>
<h3>🔗 Learn More</h3>
<p>Website: <strong><a href="https://siteskite.com/" rel="nofollow ugc">SiteSkite.com</a></strong><br />
Documentation: <strong><a href="https://knowledgebase.siteskite.com/" rel="nofollow ugc">Knowledgebase</a></strong></p>
<h3>🧭 Who is SiteSkite for?</h3>
<ul>
<li>WordPress website owners  </li>
<li>Agencies managing client sites  </li>
<li>Freelancers & developers  </li>
<li>Hosting providers offering WP upkeep  </li>
<li>Anyone who wants peace of mind & automation  </li>
</ul>
<h3>External services</h3>
<p>This plugin connects to external services to perform backups, restores, and operational callbacks. Below is a list of services, what they are used for, what data is sent, and relevant policies.</p>
<ul>
<li>
<p>Dropbox</p>
<ul>
<li>What it’s used for: Uploading and downloading backup archives to the site owner’s Dropbox.</li>
<li>What data is sent and when: Backup file contents and related metadata (e.g., file name and size) during backup and restore operations initiated by the administrator.</li>
<li>Endpoints: <code>https://content.dropboxapi.com</code>, <code>https://api.dropboxapi.com</code></li>
<li>Policies: Terms https://www.dropbox.com/terms · Privacy https://www.dropbox.com/privacy</li>
</ul>
</li>
<li>
<p>Google Drive</p>
<ul>
<li>What it’s used for: Uploading and downloading backup archives to the site owner’s Google Drive.</li>
<li>What data is sent and when: Backup file contents and related metadata during backup and restore operations initiated by the administrator.</li>
<li>Endpoints: <code>https://www.googleapis.com/drive/v3/files</code> and related upload endpoints such as <code>https://www.googleapis.com/upload/drive/v3/files</code> (resumable/multipart uploads).</li>
<li>Policies: Terms https://policies.google.com/terms · Privacy https://policies.google.com/privacy</li>
</ul>
</li>
<li>
<p>Amazon S3</p>
<ul>
<li>What it’s used for: Uploading and downloading backup archives to the site owner’s Amazon S3 bucket.</li>
<li>What data is sent and when: Backup file contents and related metadata during backup and restore operations initiated by the administrator.</li>
<li>Endpoints: Region-specific S3 REST API (e.g., <code>https://s3.<region>.amazonaws.com</code>).</li>
<li>Policies: Service Terms https://aws.amazon.com/service-terms/ · Privacy https://aws.amazon.com/privacy/</li>
</ul>
</li>
<li>
<p>Backblaze B2</p>
<ul>
<li>What it’s used for: Uploading and downloading backup archives to the site owner’s Backblaze B2 bucket.</li>
<li>What data is sent and when: Backup file contents and related metadata during backup and restore operations initiated by the administrator.</li>
<li>Endpoints: Backblaze B2 API (e.g., <code>https://api.backblazeb2.com</code>).</li>
<li>Policies: Terms https://www.backblaze.com/company/legal/terms.html · Privacy https://www.backblaze.com/company/privacy.html</li>
</ul>
</li>
<li>
<p>pCloud</p>
<ul>
<li>What it’s used for: Uploading and downloading backup archives to the site owner’s pCloud storage.</li>
<li>What data is sent and when: Backup file contents and related metadata during backup and restore operations initiated by the administrator.</li>
<li>Endpoints: pCloud API (e.g., <code>https://api.pcloud.com</code>) and regional variants such as <code>https://eapi.pcloud.com</code> (EU) and <code>https://asiaapi.pcloud.com</code> (Asia). OAuth token exchange: <code>https://my.pcloud.com/oauth2_token</code>.</li>
<li>Policies: Terms https://www.pcloud.com/terms.html · Privacy https://www.pcloud.com/privacy-policy.html</li>
</ul>
</li>
<li>
<p>SiteSkite endpoints (operational callbacks and validation)</p>
<ul>
<li>What it’s used for: Validating the plugin API key, linking a site, downloading managed assets, and sending operational status callbacks to SiteSkite services. Some staging endpoints may be used for validation or asset download during testing.</li>
<li>What data is sent and when: Site identifier and operation status metadata (e.g., backup/restore status) during validation and callbacks. For asset downloads, only the requested asset path is transmitted. Backup contents are never sent to SiteSkite; only selected metadata required to coordinate operations.</li>
<li>Policies: Terms https://www.siteskite.com/terms-of-service · Privacy https://www.siteskite.com/privacy-policy</li>
</ul>
</li>
<li>
<p>WordPress.org (downloads)</p>
<ul>
<li>What it’s used for: Downloading official WordPress core translation files when requested by an administrator.</li>
<li>What data is sent and when: The request URL includes the WordPress core version and language code to retrieve the matching translation archive; no personal data is sent.</li>
<li>Endpoints: <code>https://downloads.wordpress.org/translation/core/<version>/<locale>.zip</code></li>
<li>Policies: Terms https://wordpress.org/about/privacy/ · Privacy https://wordpress.org/about/privacy/</li>
</ul>
</li>
</ul>
<p>Notes:<br />
– Data is transmitted only when you initiate an action that requires it (e.g., starting a backup/restore, validating your API key, or downloading translations).<br />
– You choose and configure the cloud storage provider(s) to be used.</p>


SiteSkite: Backup Restore Update & Monitor multiple Sites

Backup, restore, staging, clone, migrate & update WordPress sites effortlessly.

FP Site Security vs SiteSkite: Backup Restore Update & Monitor multiple Sites