Joseph Mendez

<p>FP Site Security is a self-contained WordPress security plugin. It runs entirely on your own site — no external dashboards, no license servers, no cloud sync.</p>
<p>Features:</p>
<ul>
<li>Login protection — brute-force lockout, optional TOTP two-factor authentication</li>
<li>Firewall — built-in rules and request blocking</li>
<li>DDoS rate limiting</li>
<li>Near-real-time malware scanning with signature and heuristic detection</li>
<li>File integrity monitoring</li>
<li>Optional WordPress.org checksum verification</li>
<li>Optional outdated plugin/theme/core checks</li>
<li>Quarantine and guided cleanup</li>
<li>Local + scheduled backups</li>
<li>Activity log and reports</li>
<li>Admin email alerts</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to a small number of third-party services. All of them are optional and only contacted when you turn them on, supply credentials, or opt in to a feature that explicitly depends on that service.</p>
<p><strong>WordPress.org (checksum and update verification, optional)</strong> — Only contacted if you enable WordPress.org verification lookups in the plugin settings. When enabled, the plugin requests WordPress core checksums and update metadata from <code>api.wordpress.org</code>. No personal data is sent. wordpress.org Privacy: https://wordpress.org/about/privacy/.</p>
<p><strong>Google reCAPTCHA (optional)</strong> — Only contacted if you enable reCAPTCHA on login/register/password-reset and supply your own site keys. The plugin loads <code>https://www.google.com/recaptcha/api.js</code> on the login page and submits responses to <code>https://www.google.com/recaptcha/api/siteverify</code>. Google reCAPTCHA Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy.</p>
<p><strong>Slack (optional)</strong> — Only contacted if you enable Slack notifications and configure a webhook URL. Security events are posted to the webhook you supply.</p>
<p><strong>Sentry (optional)</strong> — Only contacted if you enable Sentry notifications and configure a Sentry DSN. Critical events are posted to the Sentry endpoint encoded in your DSN.</p>
<h3>Filesystem scope</h3>
<p>The plugin only writes to the database and a small set of clearly named directories under <code>wp-content/uploads/</code>. It never asks users to edit plugin files, and it does not store runtime data in its own plugin folder. Every write below is gated behind an admin nonce or a WordPress cron event — there is no path that an unauthenticated visitor can use to write to disk.</p>
<ul>
<li><code>wp-content/uploads/firssise-backups/</code> — created by the local-backup feature when scheduled or manual backups are run. Contains the generated <code>.zip</code> archives. Backups are NOT removed on uninstall (that’s your data); delete the folder manually if you don’t want them.</li>
<li><code>wp-content/uploads/firssise-logs/</code> — internal error log written by the plugin’s own error-capture handlers when the “Monitor PHP error log” option is enabled. The directory gets a blank <code>index.html</code> and a restrictive <code>.htaccess</code> file when supported by the server.</li>
<li>Quarantine records are stored in the WordPress database. Flagged files are deleted from disk when quarantined instead of being copied into the plugin directory or a public uploads subfolder.</li>
</ul>
<p>The plugin reads many other paths (WordPress core files, other plugins, themes, uploads) for integrity scanning and malware detection, but it does not write to them.</p>


FP Site Security

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

Thomas Deneulin

Aurelio

Florian Truchot

<p>WP Umbrella empowers agencies and WordPress developers to master WordPress maintenance, and manage multiple sites effortlessly. Key features include:</p>
<ul>
<li>Dashboard: Monitor, update, and backup all your sites from a single dashboard.</li>
<li>Automated Cloud Backup: Secured, incremental backup with GDPR compliance, ensuring your data’s safety and easy backup restoration. WP Umbrella provide with GDPR Backup.</li>
<li>One-Click Updates: Update core, themes, and plugins, maintaining security and performance. Update Rollback available. Exclude update and ignore updates too.</li>
<li>Uptime Monitoring: Stay informed with alerts on uptime, downtime, and site performance, including Google Page Speed monitoring.</li>
<li>Error Tracking: Monitor PHP errors to maintain a safe website.</li>
<li>Security monitoring: monitor vulnerabilities and security metrics.</li>
<li>Reports: automate your reporting on update, GDPR backup, uptime, etc.</li>
</ul>
<p>WP Umbrella is the best alternative to ManageWP, MainWP, WP Remote, InfiniteWP.</p>
<h3>WordPress Management Features</h3>
<ul>
<li>Multiple Sites Management: manage and log into your WordPress sites with a unified dashboard.</li>
<li>Update Management: Bulk update plugins, and themes in 1-click. Rollback included.</li>
<li>Backup and Restoration: automated and scheduled backups. Backup WordPress now!</li>
<li>Comprehensive Monitoring: From uptime to WordPress errors.</li>
</ul>
<h4>Premium / Freemium</h4>
<p>Create an account and enjoy 14 day trial with all features (backup, uptime monitoring, safe update, etc). Then you only have access to our health check.</p>


WP Umbrella: Update Backup Restore & Monitoring

I've used other tools in the past for managing lots of websites. Both hosted and self hosted. WP-Umbrella makes everything very simple and straightforward to use. 

Easy to understand dashboard and very nice reports to send to clients.

Simple & Straightforward


If you manage several WordPress websites, it's critical to follow updates, performance, security and do backups on a regular basis.



WP Umbrella is our go-to solution to handle all of this. Furthermore, they're adding more and more features on a regular basis.



That's a great tool for WP professionals!


WP Umbrella is a must-have for any webmaster


I'm using it for a year on 5 websites and will progressively migrate all WordPress websites to WP Umbrella.



It's really simple to setup, it simply does the job.



It is not free but all job needs to be paid especially when it is well done and time saver.



If you have 1, 2, 10, 100 websites to manage updates and much more, do not hesitate longer!



Thank you guys for your great job!


Surely the best WordPress maintenance plugin

Everything you need to sell WordPress maintenance and manage multiple sites effortlessly: backup, update, uptime monitoring, and security.

FP Site Security vs WP Umbrella: Update Backup Restore & Monitoring