Rafal Gierlicki

NETSENSAI Shield offers a range of security features, including:
Changing the login URL to reduce brute force attack risks.
Disabling the REST API (WP API JSON) for non-logged-in users.
Disabling XML-RPC to prevent unauthorized access.
Disabling the WordPress file editor to avoid accidental or malicious changes.
Disabling Application Passwords to block unauthorized API access.
Applying advanced HTTP security headers (e.g., HSTS, X-Frame-Options, Content-Security-Policy).
Integration with W3 Total Cache:
Permanently disable .htaccess writes by W3TC
Runtime disabling of Page Cache UI
One-time full cache flush on first admin page load
Automatic cache flush on Secure Options save
Physical cleanup and permanent disable via the W3TC API
Suppression of Site Health REST API availability notices for non-logged-in users (removes false Site Health errors while maintaining full API blocking).
In addition, the plugin provides helpful user feedback:
Email notifications when the login URL changes – sends a localized HTML email (Polish or English) with your old and new login links, change date and the plugin logo, so you remember to update your bookmarks.
Admin popup when disabling the WP API JSON – displays a friendly modal warning that disabling the REST API may break plugins like WooCommerce or contact forms. The popup includes a purchase link to upgrade to the PRO version if you need this feature without losing functionality.
Scoped styling – the custom colour for the “Save changes” button is now limited to the Secure Options page, so other admin pages keep the default WordPress look.
Promotional banner assistant – notifies administrators of summer discount codes and NETSENSAI Shield PRO features.
The free version provides both core and advanced Level 3 security functionalities. A PRO version offers extended support, additional features, and automatic protection enhancements.

NETSENSAI Shield

Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.

S4E: Effortless & Continuous Cybersecurity is a powerful WordPress plugin that seamlessly integrates with the S4E scan API to provide comprehensive security scanning capabilities for your website. This plugin offers a user-friendly interface to trigger various types of security scans and view detailed reports.
<h4>Key Features</h4>
<ul>
<li>User-friendly interface with light/dark theme support</li>
<li>Multiple scan types:
<ul>
<li>Full Scan</li>
<li>Light Scan</li>
<li>Single Scan</li>
<li>Crawler Scan</li>
</ul>
</li>
<li>Real-time scan progress tracking</li>
<li>Detailed scan reports</li>
<li>Secure API integration</li>
<li>Responsive design</li>
</ul>
<h4>How to Use</h4>
Step 1: Create an S4E Account 
1. Visit <a href="https://app.s4e.io/sign-up" rel="nofollow ugc">S4E Signup</a> and create a free account 
2. Verify your email address 
3. Login to your S4E dashboard
Step 2: Get Your API Token 
1. In your S4E dashboard, navigate to <a href="https://app.s4e.io/api-token" rel="nofollow ugc">API Token page</a> 
2. Generate a new API token 
3. Copy the token (you’ll need this for the plugin)
Step 3: Install and Configure the Plugin 
1. Install and activate the plugin in WordPress 
2. The plugin will automatically create a new “S4E Security” menu item in your WordPress admin sidebar
Step 4: Access the Plugin 
1. In your WordPress admin area, navigate to “S4E Security” in the sidebar menu 
2. You’ll see a login form where you can enter your S4E API token 
3. Enter your S4E API token in the login field 
4. Click “Login” – you’ll be redirected to your profile dashboard
Step 5: Add Your Asset for Auto-Verification 
1. In the Profile tab, you will see your WordPress site’s domain automatically detected. 
2. To enable auto-verification, add this asset to your S4E account by clicking “Add Asset”. 
3. After adding the asset, you will see a popup to choose a verification method. Both security.txt and HTML file methods are available for verification. 
4. When you choose a verification method, a file will be automatically created in the root of your domain (e.g., wordpress.net/security.txt or wordpress.net/s4e-ft6PdLzawaNM.html). 
5. Click the “Verify Asset” button to complete verification. For successful verification, the security.txt file must be accessible at your base domain (e.g., wordpress.net/security.txt). 
6. Your asset will be verified automatically once the file is detected.
Step 6: Start Your First Scan 
1. Go to the “Reports” tab 
2. Click “Start a new scan” 
3. Choose your scan type: 
 – Full Scan: Comprehensive security analysis (recommended for first scan) 
 – Light Scan: Quick security check 
 – Single Scan: Redirects to S4E web interface for advanced scanning 
 – Crawler: Maps your website structure 
4. Click “Start Scan”
Step 7: View Results 
1. Scan progress will be displayed in real-time with status updates. 
2. Once every scan is completed, detailed reports will be available in the Reports tab. 
3. Click on any report to view vulnerability details and remediation recommendations in the S4E web interface.
Demo Credentials: 
For review purposes, you can contact S4E support at support@s4e.io for a demo token.
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8 or higher</li>
<li>PHP 7.4 or higher</li>
<li>Active S4E account and API credentials</li>
</ul>
<h3>External Services</h3>
This plugin connects to external services to provide security scanning capabilities. The following external services are used:
<h3>S4E API (https://api.s4e.io/api)</h3>
What the service is and what it is used for: 
The S4E API is a comprehensive security scanning service that provides vulnerability assessment and reporting capabilities for websites and web applications.
What data is sent and when: 
– API Token: Sent with every request for authentication 
– User Information: Sent when retrieving user profile and package information 
– Asset Information: Sent when adding, checking ownership, or retrieving details about domains/URLs to be scanned 
– Scan Parameters: Sent when initiating various types of security scans (Full Scan, Light Scan, Single Scan, Crawler Scan) 
– Scan History Requests: Sent when retrieving scan history and reports 
– Activity Logs: Sent when retrieving scan activity and progress information
Service Provider Information: 
– Service Provider: S4E (Security 4 Everyone) 
– Terms of Service: <a href="https://s4e.io/terms-of-use" rel="nofollow ugc">https://s4e.io/terms-of-use</a> 
– Privacy Policy: <a href="https://s4e.io/privacy-policy" rel="nofollow ugc">https://s4e.io/privacy-policy</a>
<h3>S4E SRS Service (https://srs.s4e.io)</h3>
What the service is and what it is used for: 
The S4E SRS (security.txt Reporting Service) is used to generate security.txt files for domains, providing contact information for security researchers and vulnerability disclosure.
What data is sent and when: 
– Domain Information: Sent when generating security.txt files for vulnerability disclosure
Service Provider Information: 
– Service Provider: S4E (Security 4 Everyone) 
– Terms of Service: <a href="https://s4e.io/terms-of-use" rel="nofollow ugc">https://s4e.io/terms-of-use</a> 
– Privacy Policy: <a href="https://s4e.io/privacy-policy" rel="nofollow ugc">https://s4e.io/privacy-policy</a>
<h3>Additional Information</h3>
For more information about S4E and its services, please visit <a href="https://s4e.io" rel="nofollow ugc">S4E.io</a>.

S4E: Effortless & Continuous Cybersecurity

Integrate S4E API with WordPress to provide comprehensive security scanning capabilities for your website.

NETSENSAI Shield vs S4E: Effortless & Continuous Cybersecurity