Automattic

Jeremy Herve

Brandon Kraft

leogermani

Brad Jorsch

Eric Binnion

Foteini Giannaropoulou (a11n)

Sami Falah

Renato Augusto Gama dos Santos

njweller

Manzoor Wani

Derek Smart

sermitr

retrofox

miguelxavierpenha

Karen Attfield

arsihasi

Igor Zinovyev

dkmyta

kangzj

siddarthan

Paul Bunkham

<p>Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!</p>
<h3>TOTAL SITE SECURITY FROM WORDPRESS EXPERTS</h3>
<p>Jetpack Protect is a free and essential WordPress security plugin that scans your site and warns you about vulnerabilities, keeping your site one step ahead of security threats. It’s easy to use; setup requires just a few clicks!</p>
<p>By upgrading Protect, you also unlock malware scanning with one-click fixes for most issues and instant notifications when threats are detected. Our automated Web Application Firewall (WAF) also protects your site from bad actors around the clock.</p>
<p>Jetpack Protect is created by WordPress experts; our parent company Automattic is behind Jetpack, WordPress.com, WooCommerce, WPScan, and much more. There is no better company to understand the security needs of WordPress sites.</p>
<h3>WHAT DOES JETPACK PROTECT (FREE) CHECK FOR?</h3>
<p>Jetpack Protect scans your site on a daily basis and warns you about:<br />
– The version of WordPress installed, and any associated vulnerabilities<br />
– What plugins are installed, and any related vulnerabilities<br />
– What themes are installed, and any associated vulnerabilities</p>
<h4>What are vulnerabilities? Why do I need to scan my site regularly?</h4>
<p>Site vulnerabilities are flaws in a website’s code that weaken the site’s overall security. These can be introduced to a site in various ways, in most cases unintentionally.</p>
<p>Some of the ways vulnerabilities can be introduced to a site are:<br />
– Poorly written site code<br />
– Plugin and theme bugs<br />
– WordPress version bugs<br />
– System misconfigurations</p>
<p>If a bad actor detects a vulnerability on your site, they can exploit it to access sensitive information, update your site, and more to damage your business or brand.</p>
<p>That’s why it’s essential to use a reputable and reliable vulnerability & malware site scanner like Jetpack Protect to safeguard your site.</p>
<h4>Can I use Jetpack Scan to fix a site that is already infected?</h4>
<p>Jetpack Protect (Scan) detects and prevents attacks, but is not designed to fully clean up sites infected before it was active. If your site has malware, take immediate action to clean it up and remove the malicious code.</p>
<p>To clean up your site, we suggest using a malware removal tool, or if possible restore from a backup taken before the infection. We recommend using Jetpack VaultPress Backup in conjunction with Jetpack Scan to secure your website.</p>
<p><a href="https://jetpack.com/support/scan/how-to-clean-your-hacked-wordpress-site/" rel="nofollow ugc">Learn more about cleaning your site</a></p>
<h3>BRUTE FORCE ATTACK PROTECTION</h3>
<p>Jetpack Protect blocks unwanted login attempts from malicious botnets and distributed attacks.</p>
<h4>Is my site under attack?</h4>
<p>Brute force attacks are the most common form of hacking — and hackers don’t discriminate. As the most commonly used Content Management System on the web, WordPress sites make an attractive target for hackers looking to exploit code vulnerabilities unique to WordPress.</p>
<p>Using large networks of computers known as botnets, hackers can try to gain access to your site by using thousands of different combinations of usernames and passwords until they find the right one.</p>
<p>Recently, attackers have found a way to “amplify” these attacks against the WordPress XML-RPC file – making it easier for attackers to try and break into your site.</p>
<p>WordPress brute force attacks can:<br />
– Slow down your site (or cause it to stop responding) because of repeated server requests.<br />
– Allow unauthorized access to your site for hackers to modify your code or insert spammy links.<br />
– Put your site content and data at risk.</p>
<p>That’s where Jetpack Protect comes in. Our state-of-the-art security tools automatically block these attacks, protecting your WordPress site from unauthorized access.</p>
<p>On average, Jetpack blocks 5,193 WordPress brute force attacks over a site’s lifetime. It allows you to protect yourself against both traditional brute force attacks and distributed brute force attacks that use many servers against your site.</p>
<h3>UPGRADE PROTECT TO REMOVE MALWARE IN ONE CLICK AND BE PROTECTED BY OUR WAF</h3>
<p>By upgrading Protect, you unlock total site security from WordPress experts:<br />
– Automated daily malware scanning in addition to vulnerability checks<br />
– One-click fixes for most issues<br />
– Web Application Firewall (WAF) with automatic rule updates<br />
– Instant email notifications when threats are detected<br />
– Priority support from WordPress experts</p>
<h4>What is malware? Why do I need to protect against it?</h4>
<p>Malware is malicious code or software that has been created by bad actors to disrupt, damage, or gain access to your site. There are many ways that malware can get onto your WordPress site. The most common method is through attackers using vulnerable plugins or themes to install malware.</p>
<p>Similar to the vulnerabilities listed above, bad actors can use malware to capture sensitive information, damage your site, and harm your business or brand.</p>
<p>Jetpack Protect instantly notifies you of any threats detected, with one-click fixes for most issues.</p>
<h4>What is a Web Application Firewall (WAF)?</h4>
<p>A web application firewall blocks traffic and malicious requests to your site from known bad actors.</p>
<p>As threats are detected, new rules are added to Jetpack Protect’s firewall, which provides around-the-clock protection for your WordPress site.</p>
<h3>OVER 53,500 REGISTERED VULNERABILITIES IN OUR DATABASE</h3>
<p>WordPress security is something that evolves over time. Jetpack Protect leverages the extensive database of WPScan, an Automattic brand. All vulnerabilities are entered into our database by dedicated WordPress security professionals and updated constantly as new information becomes available.</p>
<h3>JETPACK PROTECT IS EASY TO SETUP AND USE</h3>
<p>There’s nothing to configure – the setup process is as easy as:<br />
1. Install and activate the plugin<br />
2. Set up it with one click.</p>
<p>After you activate the plugin, Jetpack Protect will run daily automatic malware scans on your WordPress site and update you on vulnerabilities associated with your installed plugins, themes, and WordPress core.</p>
<h3>WITH 💚 BY JETPACK</h3>
<p>This is just the start!</p>
<p>We are working hard to bring more features and improvements to Jetpack Protect. Let us know your thoughts and ideas!</p>
<h3>FURTHER READING</h3>
<ul>
<li><a href="https://jetpack.com/" rel="nofollow ugc">Jetpack: Security, performance, and growth tools made for WordPress sites by the WordPress experts.</a></li>
<li>You can follow the <a href="https://twitter.com/jetpack?lang=en" rel="nofollow ugc">Jetpack Twitter</a> account to catch up on our latest WordPress security recommendations and updates.</li>
<li><a href="https://jetpack.com/blog/category/security/page/3/" rel="nofollow ugc">WordPress Security: How to Protect Your Site From Hackers</a></li>
<li><a href="https://jetpack.com/blog/should-you-use-jetpack-for-wordpress-security/" rel="nofollow ugc">Should You Use Jetpack for WordPress Security?</a></li>
<li><a href="https://jetpack.com/blog/jetpack-acquires-wordpress-vulnerability-database-wpscan/#more-139339" rel="nofollow ugc">Jetpack Acquires WordPress Vulnerability Database WPScan</a></li>
</ul>


Jetpack Protect

Unlike many bloated security plugins, this plugin seems to have all the necessary core features, without any BS.

It's a positive development that Jetpack is splitting all the many features into their own plugins so you can pick and choose what features you need.

The only downside I've noticed is that the plugin doesn't work if your site is hosted in a local development environment.

Good


powerful tool to make your website a live



Much like how operating systems needed to eventually offer & maintain their own anti-malware programs (not offload it to a 3rd party program or even make people pay for something essential like security monitoring & scanning), WordPress finds itself in a similar position to help make sure users of its software are safe (or at least can know something was found to then act on it.)



This is a great direction to see WordPress going in as a primary/official offering for WordPress.



I do with it was more clear what is & isn't in the free offering from Jetpack Protect compared to Jetpack Scan (ideally then making the essentials in the free offering [a-la Windows Security], while I do understand stuff that can't be done on the site itself potentially having a cost associated with it [not exactly sure what those items would be... automated scans, email notifications, one-click cleanup/actions, etc. should all be doable on the site itself without getting a remote service involved [updating what to look for then being intermittent enough to ideally not be too demanding while that does have some resource requirements... is it then just more frequent checks for those details, priority support, etc...?])


A fundamental feature

Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!

fedata

<h4>Any event type</h4>
<p>Use Fast Events for any kind of event (sport events, festivals, congresses, concerts, seminars, your local party, …)</p>
<p>From selling a single‑ticket type with one entrance scan to managing events with multiple ticket types, several entrances, and multiple scans.</p>
<p>If you wish, you can take advantage of volume pricing by ticket type or use the many discount voucher options.</p>
<p>Ideal for sporting events that have multiple scan checkpoints along the route and a final check to confirm every checkpoint has been scanned.</p>
<p>Take a look at the <a href="https://docs.fast-events.eu/en/latest/usage/examples.html" rel="nofollow ugc">examples</a> to get an idea.</p>
<h4>Ticket personalisation</h4>
<p>A unique ticket personalisation module that lets you personalise tickets, share them, display order information, and generate invoices if required.</p>
<p>Define order-level or ticket-level input fields and assign them to specific ticket types.</p>
<p>Embed the ticket personalisation module on a page using a WordPress shortcode.</p>
<h4>Real-time scanning</h4>
<p>No need for expensive scanning equipment. Use our free <a href="https://play.google.com/store/apps/details?id=nl.fe_data.scanner" rel="nofollow ugc">Android</a> and <a href="https://apps.apple.com/app/fe-scan/id1496549803" rel="nofollow ugc">IOS</a> app to scan the tickets in real-time at the entrance.</p>
<p>There’s no limit to the number of scanning applications that can run simultaneously.</p>
<p>Staged scans, temporarily leave and re-enter(e.g. to smoke) and exit scans are possible, and error messages can be tailored to your own event.</p>
<h4>PDF e-tickets</h4>
<p>Define your own e-tickets in your favourite word processor (Word, LibreOffice, …). Then upload the PDF-file to WordPress through the plugin’s admin interface and specify where Fast Events should place the QR‑code block.</p>
<p>Use the default layout or specify a custom layout that includes personalisation fields or order information.</p>
<h4>Tracking</h4>
<p>Use the <a href="https://fe-tracking.fast-events.eu/" rel="nofollow ugc">FE Tracking App</a> especially for sporting events to allow participants to signal checkpoints on the route in the App and upload the time at which they pass them to the event organiser’s server.</p>
<p>Realtime tracking and display additional points of interest and descriptions on the map, as defined by the event organiser. Examples include First-aid stations along the route, catering facilities along the route, checkpoints along the route, …</p>
<h4>Payouts next day</h4>
<p>There are no fees per ticket. The only cost is the transaction fee for each order.<br />
It doesn’t matter how many tickets are in the order; the payment provider (Stripe, PayPal, or Mollie) only charges the transaction fee once.<br />
You can find <a href="https://docs.fast-events.eu/en/latest/getting-started/introduction.html#payouts-next-day" rel="nofollow ugc">here</a> more information.</p>
<h4>Admin App</h4>
<p>Would you like to view events and orders on your mobile / tablet / desktop? Use the <a href="https://docs.fast-events.eu/en/latest/apps/admin.html" rel="nofollow ugc">FE Admin App</a>.</p>
<ul>
<li>Resend, refund, delete, re-create tickets, or even create orders.</li>
<li>Quickly help users configure the FE Scanner App.</li>
<li>Or view statistics on tickets sold and tickets scanned</li>
<li>Basically, you maintain the entire plugin from your mobile, tablet, or browser.</li>
</ul>
<p>The system has a comprehensive permissions system where users can have restrictions on functionality and events that can be modified.</p>
<h4>Seating plans</h4>
<p>Create your own seating plans for events that require them.</p>
<p>Fill seats in the order you define.</p>
<h4>Saas mode</h4>
<p>Host multiple organisations on your platform, each with their own events. They can operate as sub‑merchants using your ticketing system.</p>
<p>Add (sub)accounts in the FE Admin app, assign selected events to those users, and, where necessary, restrict their functionality.</p>
<p>Use flexible application fees that are automatically transferred to you. Only Stripe and Mollie are supported at the moment.</p>
<h4>REST API</h4>
<p>Fast Events offers a <a href="https://docs.fast-events.eu/en/latest/advanced/api.html" rel="nofollow ugc">public REST API</a>.<br />
This allows Fast Events data to be created, read, updated, and deleted using requests in JSON format and using WordPress REST API application passwords to grant access.</p>
<p>But you could also create your own scanning app by using the scan endpoint.</p>
<p>Fine‑grained access control is available for individual endpoints via the Accounts tool in the FE Admin app.</p>
<h4>Webhooks</h4>
<p>Fast Events offers <a href="https://docs.fast-events.eu/en/latest/advanced/webhooks.html" rel="nofollow ugc">Webhooks</a> to sent notifications to a URL of your choice.</p>
<p>You can configure it per event and choose which types of notifications are allowed to be sent.</p>
<p>Webhooks make it easy for third-party applications to integrate with Fast Events.</p>
<h4>Actions & filters</h4>
<p>Do you want to extend the functionality of Fast Events?</p>
<p>We have a number of filters and actions that allow you to do just that.</p>
<p>Have a look at our <a href="https://docs.fast-events.eu/en/latest/hooks/usage.html" rel="nofollow ugc">examples</a>.</p>
<h3>Features</h3>
<ul>
<li>Event types (single, single selection from many, multiple selection, and Passe-partout)</li>
<li>Design your own PDF e-tickets and invoices</li>
<li>Responsive admin interface and a separate Admin App for IOS and Android</li>
<li>Volume pricing per ticket type and flexible discount codes</li>
<li>Multiple scan levels: entry, ‘backstage’, reset, temporarily-leave/re-enter (e.g. to smoke) and exit</li>
<li><a href="https://player.vimeo.com/video/566996933" rel="nofollow ugc">Mobile tracking</a> app for sports events</li>
<li>Design email confirmations</li>
<li>Native API is included for many professional email providers (Mailgun, Sendgrid, Brevo, Amazon, …)</li>
<li>Define input fields for personalised e-tickets</li>
<li>Define e-ticket types</li>
<li>Sell to closed user groups</li>
<li>Saas mode</li>
<li>Flexible realtime e-ticket scanning with the free<a href="https://docs.fast-events.eu/en/latest/apps/scan.html" rel="nofollow ugc">Scan App</a> at multiple levels</li>
<li>Optional reCAPTCHA protection</li>
<li>Export orders and tickets for offline data analysis</li>
<li>Integrated with Stripe, PayPal, or <a href="https://my.mollie.com/dashboard/signup/5835294" rel="nofollow ugc">Mollie</a> as payment provider, providing a variety of payment methods</li>
<li>Seating plans</li>
<li>Public REST API, Webhooks and actions & filters for custom extensions</li>
<li>Flexible authorization system for limiting functionality for certain users</li>
<li>Blazingly fast</li>
<li>Multisite ready</li>
<li>And much more</li>
</ul>
<p>Have a look at the <a href="https://docs.fast-events.eu/" rel="nofollow ugc">documentation</a>.</p>


Fast Events

Sell personalized event tickets with PayPal, Stripe, or Mollie, including free Scan App, Tracking App, and Admin App.

Jetpack Protect vs Fast Events