FreelanceBo Group S.r.l.s

FreelanceBo Sentra Control is a comprehensive WordPress security plugin that connects your site to the Sentra central console, providing enterprise-grade protection.
<h4>Features</h4>
<ul>
<li>Web Application Firewall (WAF) – Block malicious requests, SQL injection, XSS, and other common attacks</li>
<li>Malware Scanner – Scan WordPress core files, themes, and plugins for known malware signatures</li>
<li>Vulnerability Scanner – Check installed plugins and themes against known vulnerability databases</li>
<li>Brute Force Protection – Limit login attempts and block attackers automatically</li>
<li>File Integrity Monitoring – Detect unauthorized changes to WordPress core files</li>
<li>IP Blocklist – Manage blocked IPs manually or automatically based on threat detection</li>
<li>Security Events Log – Track all security events with detailed logging</li>
<li>Central Console – Manage multiple WordPress sites from a single dashboard</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin on your WordPress site</li>
<li>Connect to your Sentra central console by entering the server URL and API key in Settings</li>
<li>The plugin automatically starts monitoring your site and reporting to the console</li>
<li>View scan results, manage firewall rules, and review security events from either the WordPress admin panel or the central console</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8 or higher</li>
<li>PHP 7.4 or higher</li>
<li>A Sentra central console account (available at freelancebo.it)</li>
</ul>
<h3>External Services</h3>
This plugin relies on the following external services:
<h4>FreelanceBo Sentra Control Console</h4>
This plugin connects to a self-hosted FreelanceBo Sentra Control central console for centralized security monitoring and management. This connection is essential for the plugin to function.
What data is sent: 
* Site URL, WordPress version, PHP version, and installed plugins/themes list (during heartbeat and scans) 
* Security events (firewall blocks, failed login attempts, malware detections, file integrity changes) 
* Scan results (malware scan, vulnerability scan, integrity scan findings)
When data is sent: 
* On plugin activation and periodically via heartbeat (every 5 minutes) 
* When security events occur (login attempts, firewall blocks) 
* When scans are triggered (manually or via scheduled cron) 
* When the admin manages firewall rules, blocklists, or settings
Service provider: FreelanceBo Group S.r.l.s., Bologna, Italy 
* Service URL: <a href="https://sentra.freelancebo.it" rel="nofollow ugc">https://sentra.freelancebo.it</a> 
* Terms of Service: <a href="https://sentra.freelancebo.it/terms" rel="nofollow ugc">https://sentra.freelancebo.it/terms</a> 
* Privacy Policy: <a href="https://sentra.freelancebo.it/privacy" rel="nofollow ugc">https://sentra.freelancebo.it/privacy</a>
The console server URL is configurable by the user in the plugin settings. All data is transmitted over HTTPS. Data is stored on EU-based servers in compliance with GDPR.
<h4>WordPress.org API</h4>
The vulnerability scanner module uses the official WordPress.org API to retrieve information about installed plugins, themes, and WordPress core version. This is necessary to check for known vulnerabilities and outdated software.
What data is sent: 
* Plugin slugs, theme slugs, and WordPress core version
When data is sent: 
* When a vulnerability scan is triggered (manually or via scheduled cron)
Service provider: WordPress.org 
* API endpoint: <a href="https://api.wordpress.org" rel="nofollow ugc">https://api.wordpress.org</a> 
* Terms of Service: <a href="https://wordpress.org/about/privacy/" rel="ugc">https://wordpress.org/about/privacy/</a> 
* Privacy Policy: <a href="https://wordpress.org/about/privacy/" rel="ugc">https://wordpress.org/about/privacy/</a>

FreelanceBo Sentra Control

Security agent connecting to FreelanceBo Sentra Control console for WAF, malware scanning, brute force protection, and vulnerability scanning.

Ashar

SecurelyWP

SecurelyWP is a hassle-free security plugin that makes your WordPress site safer the moment you activate it. Most features work out of the box, with optional CAPTCHA and two-factor authentication (2FA) configuration for enhanced protection. It includes strong security features, system details, security headers, CAPTCHA integration, and 2FA to keep your site secure and healthy.
Why Choose SecurelyWP?
<ul>
<li>Works Out of the Box: Most security features activate automatically upon installation.</li>
<li>Comprehensive Protection: Guards against hacking, malicious files, form spam, and unauthorized access.</li>
<li>Lightweight: Designed to run smoothly without affecting your site’s speed or performance.</li>
<li>Free Features: Includes system details, security headers, CAPTCHA, and 2FA to monitor and protect your site.</li>
</ul>
<h3>Features</h3>
<ul>
<li>
Hide WordPress Version
<ul>
<li>Why: Stops hackers from targeting weaknesses in your WordPress version. </li>
<li>Impact: Good protection with no effect on your site’s appearance.</li>
</ul>
</li>
<li>
Disable PHP Execution in Uploads Folder
<ul>
<li>Why: Prevents harmful scripts from running if someone uploads a malicious file. </li>
<li>Impact: Strong defense against file-based attacks.</li>
</ul>
</li>
<li>
Prevent User Enumeration
<ul>
<li>Why: Blocks hackers from guessing usernames through sneaky methods. </li>
<li>Impact: Keeps your user list safe from prying eyes.</li>
</ul>
</li>
<li>
Detect & Warn About “admin” Username
<ul>
<li>Why: Alerts you if your site uses the risky “admin” username. </li>
<li>Impact: Big security boost if you change the username.</li>
</ul>
</li>
<li>
Disable File Editing in Dashboard
<ul>
<li>Why: Stops anyone from modifying your site’s code through the WordPress dashboard. </li>
<li>Impact: Major safeguard against unauthorized code changes.</li>
</ul>
</li>
<li>
Force HTTPS for Login & Admin
<ul>
<li>Why: Ensures your login and admin pages use a secure connection. </li>
<li>Impact: Critical for keeping your credentials safe.</li>
</ul>
</li>
<li>
Basic Brute Force Protection (Lite)
<ul>
<li>Why: Temporarily blocks repeated failed login attempts. </li>
<li>Impact: Strong protection against login attacks.</li>
</ul>
</li>
<li>
System Details
<ul>
<li>Why: Shows important info about your site to monitor its health. </li>
<li>Impact: Keeps you informed about your site’s status.</li>
</ul>
</li>
<li>
Security Headers
<ul>
<li>Why: Adds HTTP headers to improve your site’s security. </li>
<li>Impact: Strengthens your site’s defense with minimal setup.</li>
</ul>
</li>
<li>
CAPTCHA Protection (Cloudflare Turnstile)
<ul>
<li>Why: Adds CAPTCHA to prevent spam and bot submissions. </li>
<li>Impact: Enhances form security with user-friendly CAPTCHA.</li>
</ul>
</li>
<li>
Two-Factor Authentication (2FA)
<ul>
<li>Why: Adds an extra layer of security by requiring a second verification step during login. </li>
<li>Impact: Significantly reduces the risk of unauthorized access. </li>
</ul>
</li>
</ul>
2FA Features: 
– Authenticator App (TOTP): Use apps like Google Authenticator or Authy for time-based codes. 
– Email 2FA: Receive codes via email for verification. 
– Recovery Codes: Generate emergency codes for access if other methods are unavailable. 
– Per-User Settings: Each user can configure their own 2FA preferences. 
– Multisite Support: Super admins can enforce 2FA network-wide. 
– Flexible Options: Choose primary 2FA method from TOTP, Email 2FA, or Recovery Codes.
Supported Forms, Plugins & Multisite for CAPTCHA: 
– Core WordPress: Login, Registration, Lost Password, Comment 
– E-commerce & Membership: WooCommerce Checkout, MemberPress, Ultimate Member, WP-Members 
– Form Plugins: WPForms, Gravity Forms, Contact Form 7 (CF7), Formidable Forms, Forminator, Elementor Pro, Easy Digital Downloads (EDD), Mailchimp for WordPress 
– Community / Forums: BuddyPress, bbPress 
– Multisite: Multisite Signup Forms
<h3>How to Set Up CAPTCHA with Cloudflare Turnstile</h3>
<ol>
<li>Sign Up for Cloudflare: Go to https://www.cloudflare.com/ and create a free account or log in. </li>
<li>Add Your Site: Click “Add a Site” in the dashboard and enter your domain. </li>
<li>Access Turnstile: Navigate to the “Turnstile” section in the Cloudflare dashboard. </li>
<li>Create a Turnstile Widget:
<ul>
<li>Click “Add Widget” </li>
<li>Provide a name (e.g., “SecurelyWP CAPTCHA”) </li>
<li>Add Hostnames (your domain, e.g., example.com) → Click “Add” </li>
<li>Choose the widget type (“Managed”) </li>
</ul>
</li>
<li>Get Your Keys: Copy the Site Key and Secret Key. </li>
<li>Add Keys to SecurelyWP: Go to SecurelyWP > CAPTCHA Settings in WordPress → paste keys → enable CAPTCHA for desired forms. </li>
<li>Test Your CAPTCHA: Visit a form to ensure the CAPTCHA widget appears and works correctly.</li>
</ol>
<h3>How to Set Up Two-Factor Authentication</h3>
<ol>
<li>Access 2FA Settings: Go to “Profile” > “Two-Factor Authentication” in your WordPress dashboard. </li>
<li>Enable 2FA Methods:
<ul>
<li>Authenticator App: Scan the QR code or enter the secret into your app (Google Authenticator, Authy). Verify with a code. </li>
<li>Email 2FA: Enable to receive codes via email. </li>
<li>Recovery Codes: Generate emergency codes. Copy or download codes for safekeeping. </li>
</ul>
</li>
<li>Choose Primary Method: Select your preferred 2FA method (Authenticator App, Email, or Recovery Codes). </li>
<li>Test 2FA: Log out and log in to verify the 2FA prompt appears below the login form. </li>
<li>Multisite (Super Admins): Enable network-wide 2FA enforcement for all users.</li>
</ol>

SecurelyWP – all-in-one security

SecurelyWP is a simple security plugin that protects your WordPress site right after activation—no setup needed for most features.

FreelanceBo Sentra Control vs SecurelyWP – all-in-one security