zackdesign

AliasIO

<p>MJP Security Tools is a focused hardening plugin that does four things well:</p>
<ul>
<li><strong>XSS Database Scanner</strong> — scans every table for <code><script></code>, <code><iframe></code>, <code>onclick</code>, <code>javascript:</code> and other injection patterns</li>
<li><strong>POST Request Log</strong> — records all POST data (passwords masked) with IP, user agent, and URL for CSRF/audit detection</li>
<li><strong>Failed Login Log</strong> — tracks every failed login attempt with username, IP, and timestamp</li>
<li><strong>File Permission Checker</strong> — verifies WordPress root files and directories have safe permissions, checks for missing <code>index.html</code> files and SVN working copies</li>
</ul>
<p><strong>What this plugin does NOT do</strong> (because WordPress core already handles it):</p>
<ul>
<li>SSL enforcement — use <code>FORCE_SSL_ADMIN</code> or let WordPress 5.7+ auto-redirect</li>
<li>Password strength — WordPress core enforces strong passwords since 4.3</li>
<li>Login rate limiting — use a dedicated plugin like Limit Login Attempts Reloaded</li>
<li>Version number hiding — marginal benefit, not worth the complexity</li>
</ul>
<p><strong>Upgrading from v1.x:</strong></p>
<ul>
<li>The admin page has moved from jQuery UI tabs to native WordPress nav tabs</li>
<li>SSL forcing, password enforcement, login throttling, version hiding, admin username changing, database prefix randomization, password reset, and .htaccess generation have been removed — WordPress core and dedicated security plugins handle these better</li>
<li>PHP sessions replaced with WP transients for flash messages</li>
<li>Log data is now stored as JSON instead of serialized PHP</li>
<li>The Javacrypt client-side crypt(3) script has been removed</li>
</ul>


MJP Security Tools

Lightweight WordPress hardening — XSS database scanner, POST request logging, failed login logging, and file permission checker.

Shieldfy

<h4>Start Protecting Your Website Block attacks targeting your website.</h4>
<p>Shieldfy works as an external shields loads before your website and filter all requests , passing only trusted non harmful traffic and block other malicious traffic</p>
<p>Shieldfy Engine can identify and block several attacks including and not limited to<br />
Unrestricted file uploads , XSS (cross site scripting) , SQLI (SQL Injection) , RCE (Remote Code Execution), LFI/RFI (Local/Remote File Inclution) and many other</p>
<h4>IP Analysis and Risk Score.</h4>
<p>Shieldfy identify the persona of your blog visitors via IP , UserAgent , if user connectos through TOR , VPN , Proxy and more Trying to detect if that user wants to do something bad or not.</p>
<h4>Fast High level support</h4>
<p>Shieldfy security team is always here for help , our support is here for you anytime 24/7.</p>


Shieldfy Security Firewall and Anti Virus

Recommended for anyone how needs a good security shield for his website.



very nice plugin

very good plugin

Shieldfy is a cloud-based security shield for your website to protect it from web attacks and malwares.

MJP Security Tools vs Shieldfy Security Firewall and Anti Virus