WpIron

<p><strong>Iron Security</strong> is your WordPress security bodyguard.</p>
<p>It shields your site from brute force attacks, unauthorized admin access, file injections, and common exploits like XML-RPC and REST API abuse. Whether you’re a solo creator or managing client sites, Iron Security delivers essential protection without the performance hit.</p>
<p>🔒 <strong>Don’t wait until your site is compromised. Secure it now — effortlessly.</strong></p>
<p>Iron Security includes real-time brute-force protection, custom login URLs, HTTP headers, session control, malware upload prevention, and much more. All from a single, easy-to-use plugin dashboard.</p>
<p><strong>Protects Against:</strong><br />
– 🔐 Brute Force Attacks (Limit login attempts, 2FA)<br />
– 👮 Unauthorized Admin Access (Custom login URL, admin limit)<br />
– 👤 User Enumeration<br />
– 🎯 Admin Account Targeting (Admin ID & username protection)<br />
– 💣 XML-RPC & REST API Exploits<br />
– 🛡️ Code Injection & PHP Malware Uploads<br />
– 📂 Direct Access to Sensitive Files<br />
– 📛 MIME Sniffing & Content-Type Exploits<br />
– 🖼️ Clickjacking<br />
– 🧬 Cross-Site Scripting (XSS)<br />
– 🌐 Referrer Leakage</p>
<h3>🔐 Key Features</h3>
<h3>🛠 General Hardening</h3>
<ul>
<li>Disable XML-RPC & REST API</li>
<li>Hide WordPress & WooCommerce versions</li>
<li>Block AI & scraping bots</li>
<li>Disable file editor</li>
<li>Enable plugin & core auto-updates</li>
</ul>
<h3>🔍 Security Logs</h3>
<ul>
<li>View detailed logs of login attempts and alerts</li>
<li>Filter logs by IP, message, or date</li>
<li>Audit suspicious activity easily</li>
</ul>
<h3>🔑 Login & Authentication</h3>
<ul>
<li>Custom login/admin URL</li>
<li>Limit login attempts with lockouts</li>
<li>Session timeout for idle users</li>
<li>Limit number of administrators</li>
<li>Block user enumeration</li>
<li>Change default Admin ID and Username</li>
<li>Enable 2FA (Google Authenticator)</li>
</ul>
<h3>🗂 Files & Directory Protection</h3>
<ul>
<li>Block PHP file uploads</li>
<li>Prevent direct access to core/system files</li>
</ul>
<h3>📦 HTTP Security Headers</h3>
<ul>
<li>X-Content-Type-Options</li>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>Strict-Transport-Security</li>
<li>Referrer-Policy</li>
<li>Content-Security-Policy</li>
<li>Permissions-Policy</li>
</ul>
<blockquote>
<p>Iron Security is built for creators who care about speed, simplicity, and security. If you’re not securing your site, you’re risking everything.</p>
</blockquote>
<h3>Credits</h3>
<p>Developed and maintained by <a href="https://wpiron.com" rel="nofollow ugc">WPIron</a></p>
<h3>License</h3>
<p>This plugin is licensed under the GPLv2 or later.</p>


Iron Security – WordPress Security Plugin

Hardening tool that blocks hackers and protect against: Brute Force Attacks, Exploits, Injections, Clickjacking and other important functionalities.

quttera

<p>Quttera ThreatSign – Web Malware Scanner protects your WordPress website from malware, injected code, 0-day threats, and blacklist warnings.<br />
Powered by Quttera’s AI-driven heuristic engine, the scanner detects malicious PHP, obfuscated JavaScript, hidden iframes, redirects, spam, SEO malware, and credit-card skimmers targeting checkout pages.<br />
The plugin performs on-demand scans directly from your WordPress admin and checks your domain against more than 40 global security authorities, including Google, McAfee, Norton, and Yandex.<br />
Detection capabilities are continuously enhanced using insights from Quttera’s worldwide threat intelligence network.<br />
For complete protection—including automated malware removal, scheduled scanning, WAF, and 24/7 monitoring—you can upgrade to a ThreatSign Website Security plan.</p>
<p><strong>Features:</strong></p>
<ul>
<li>One-click on-demand scans from WP admin</li>
<li>0-day (unknown threat) detection via heuristic & behavioral analysis</li>
<li>Detection of malicious PHP (backdoors, shells, injections)</li>
<li>Detection of obfuscated or polymorphic JavaScript</li>
<li>Identification of malicious iframes, redirects & hidden links</li>
<li>Detection of spam & SEO malware</li>
<li>Checkout skimmer detection</li>
<li>Inspection of WordPress core file integrity</li>
<li>Detection of alien or unauthorized files in core directories</li>
<li>External links and outbound reference analysis</li>
<li>Blacklist checks across 40+ security authorities</li>
<li>Cloud-based scanning to reduce server resource load</li>
<li>Detailed investigation reports with severity levels</li>
</ul>
<p>If you need malware removal assistance, contact us at support@quttera.com or sign up for any<br />
of our ThreatSign annual plans, which include cleanup & blacklist removal:<br />
https://quttera.com/anti-malware-website-monitoring-signup</p>
<h3>Credits</h3>
<ul>
<li><a href="https://quttera.com" rel="nofollow ugc">Quttera</a></li>
</ul>
<h3>Plugin’s other home</h3>
<ul>
<li><a href="https://quttera.com/wordpress_malware_scanner" rel="nofollow ugc">WordPress Malware Scanner</a></li>
</ul>


Quttera ThreatSign – Web Malware Scanner for WordPress

Scan your WordPress site for malware, 0-day threats, injected code, and blacklist issues using Quttera’s Heuristic ThreatSign security engine.

Iron Security – WordPress Security Plugin vs Quttera ThreatSign – Web Malware Scanner for WordPress