lunexiait

<p>Lunexia .htaccess Shield is a comprehensive security plugin that helps harden your website by automatically applying proven .htaccess security rules. The latest release includes a modern WordPress 7.0-ready admin interface, a polished dashboard, and premium workflow improvements for Firewall and Malware Scan access.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li><strong>Redesigned Security Dashboard</strong>: Four separate protection score widgets for rule coverage, module coverage, malware scanning, and threat monitoring.</li>
<li><strong>Premium Admin Tabs</strong>: Firewall and Malware Scan tabs now display premium badges like Advanced Settings.</li>
<li><strong>Plugin Layout Centering</strong>: Admin screens are centered at 80% width for a clean, modern WordPress 7.0 experience.</li>
<li><strong>Enterprise Protection Status Cards</strong>: View active/inactive protection modules such as bot protection, rate limiting, live traffic monitoring, and quarantine system status.</li>
<li><strong>Security Statistics Panel</strong>: Track successful logins, failed logins, blocked IPs, pending approvals, and firewall protection status in one place.</li>
<li><strong>Security Intelligence Dashboard</strong>: View malware detections, blocked attacks, IP reputation, and threat intelligence in a single admin experience.</li>
<li><strong>One-Click Security Rules</strong>: Enable or disable security rules with a simple toggle interface.</li>
<li><strong>Security Score</strong>: Visual protection score meter for instant status awareness.</li>
<li><strong>Automatic .htaccess Management</strong>: Safely apply rules without manual editing.</li>
<li><strong>Backup & Restore</strong>: Create backups before changes and restore if needed.</li>
<li><strong>Admin Approval Workflow</strong>: Require admin approval for new Administrator/Editor accounts before login.</li>
<li><strong>OTP Login Protection</strong>: Add one-time password verification for selected user roles.</li>
<li><strong>Backend Access Protection</strong>: Restrict access to <code>wp-admin</code> and <code>wp-login.php</code> for blocked IPs.</li>
<li><strong>Feature Preview</strong>: Preview recommended premium hardening features before enabling them.</li>
<li><strong>System Status</strong>: Monitor your server’s security readiness.</li>
<li><strong>Malware Scanner and Quarantine Manager</strong>: Premium scanner with quarantine controls, findings refresh, and scan actions.</li>
<li><strong>WordPress 7.0 Compatible</strong>: Designed to look great in the new Modern admin theme.</li>
</ul>
<p><strong>Security Rules Included:</strong></p>
<ul>
<li>Disable directory browsing</li>
<li>Protect wp-config.php and .htaccess files</li>
<li>Block access to sensitive files</li>
<li>Disable XML-RPC for improved security</li>
<li>Prevent PHP execution in uploads folder</li>
<li>Malicious query string protection</li>
<li>Security headers (XSS, CSRF, HSTS, etc.)</li>
</ul>
<p><strong>Safe & Reliable:</strong><br />
* Uses core functions for .htaccess manipulation<br />
* Creates automatic backups before changes<br />
* Checks file permissions before applying rules<br />
* Non-destructive – rules are wrapped in markers for easy removal</p>
<h3>External Services</h3>
<p>This plugin connects to external services as follows:</p>
<p><strong>Google Sheets API Service</strong><br />
This plugin uses the Google Sheets API (via Google Apps Script) to validate license keys when users activate a license. This is an optional feature and is only used when a user voluntarily attempts to activate a license key.</p>
<ul>
<li><strong>Purpose</strong>: Validates license key authenticity and domain binding</li>
<li><strong>When it’s used</strong>: Only when users click “Activate License” in the plugin settings</li>
<li><strong>What data is sent</strong>: License key and website domain name</li>
<li><strong>Service provider</strong>: Google (Google Sheets / Google Apps Script)</li>
<li><strong>Terms of Service</strong>: https://policies.google.com/terms</li>
<li><strong>Privacy Policy</strong>: https://policies.google.com/privacy</li>
<li><strong>Data retention</strong>: License validation data is stored only on the user’s Google Sheet, which they control</li>
</ul>
<h3>Support</h3>
<p>For support, please visit the plugin forum or check the documentation.</p>
<h3>License</h3>
<p>This plugin is licensed under the GPLv2 or later.</p>
<h3>Credits</h3>
<p>Developed with security best practices in mind.</p>


Lunexia .htaccess Shield

Professional website security hardening with IP blocking system by automatically applying common .htaccess security rules safely.

Malcure Web Security

cybermalcure

Malware Intercept

<h3>Malcure Security</h3>
<p>★★★★★</p>
<p>Protect your WordPress site from hacks and downtime.</p>
<p>Malcure Security Suite is a fast, lightweight, cloud-connected security platform for WordPress. It performs deep server-side scans (files + database) to catch malware and unauthorized changes, allows you to monitor login activity, enables a site-wide forced re-login after incidents, and sends email alerts of incidents upon scan. Built for commercial workloads—WooCommerce stores, memberships, LMS, bookings, directories, and multi-vendor marketplaces—it plays nicely with caching/CDNs and won’t get in the way of checkout, lessons, or bookings.</p>
<h3>What Malcure Security Suite Focuses On</h3>
<ul>
<li><strong>Detect:</strong> Deep server-side malware scans (files + database), integrity/diff checks, and vulnerabilities.</li>
<li><strong>Control:</strong> Session analytics (user/IP/device), Emergency Logout (everyone except you), rotate auth keys & salts to invalidate tokens, and force site-wide re-login post-incident. Compatible with 2FA/SSO.</li>
<li><strong>Report:</strong> Clear, actionable summaries with exact file paths and reasons, email alerts with next steps, and audit-friendly logs for teams and compliance (coming-soon).</li>
<li><strong>Logging:</strong> Event logs with identifiable and traceable details.</li>
</ul>
<h3>How It Works (SaaS)</h3>
<ol>
<li>Secure Handshake: Your site authenticates with Malcure and pulls fresh threat intelligence (signatures, heuristics, rules and analysis).</li>
<li>Local-first scanning: Scans your files and database in the background.</li>
<li>Severity-ranked results: Findings are grouped by Critical/High/Medium/Low with exact specs, the reason they were flagged, and one-click actions plus email alerts and audit-ready logs.</li>
<li>Graceful: If the cloud is temporarily unreachable, Malcure Security Suite continues with last-known rules and logs locally until it reconnects.</li>
</ol>
<h3>Features</h3>
<ul>
<li>Deep server-side malware scans (files + database) using tuned signatures + heuristics.</li>
<li>Background scanning so long runs finish reliably on large sites.</li>
<li>Low overhead by design; preserves Core Web Vitals and optimized to minimize impact on site speed</li>
<li>Session management: see who’s logged in, from where.</li>
<li>Emergency Logout: one-click sign-out (everyone except you); rotate auth keys & salts to invalidate sessions.</li>
<li>Robust Event Monitor.</li>
<li>Optimal Dark Mode.</li>
</ul>
<h3>Highlights</h3>
<ul>
<li>Signature + heuristic detection for obfuscated/injected PHP/JS (backdoor/web-shell traits).</li>
<li>Database scan of options, postmeta, posts, and comments for malicious payloads.</li>
<li>Email notifications for critical events and scan results</li>
<li>Security status panel (permissions, environment)</li>
<li>Compatible with WooCommerce, LearnDash/TutorLMS, MemberPress/PMP, major booking/event plugins, WPML/Polylang, Elementor/Divi/Block Editor, and caching/CDNs (LiteSpeed Cache, WP Rocket, NGINX FastCGI, Cloudflare).</li>
</ul>
<h3>Premium (Pro)</h3>
<ul>
<li>Scheduled scans (daily/weekly/monthly) with summary emails.</li>
<li>WP-CLI automation for headless/CI workflows and cron.</li>
<li>Priority support with accelerated SLAs.</li>
</ul>


Malcure Security Suite

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

Lunexia .htaccess Shield vs Malcure Security Suite