Mirco Babini

Alfio Piccione

Babini Mazzari

Andrea Capone

<p>NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.</p>
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
<p>NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.</p>
<p>The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.</p>
<h3>Quick and easy setup</h3>
<p>Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.</p>
<p>Available modules are:<br />
– <strong>Activity Logger:</strong> logs important events such as user logins, content changes, plugin/theme installations and more.<br />
– <strong>File Integrity Monitoring:</strong> monitors core WordPress files, themes and plugins for unauthorized changes.<br />
– <strong>Access Protection:</strong> protects login and admin pages with Google reCAPTCHA v2 and limits access<br />
– <strong>Vulnerability Scanner:</strong> scans installed plugins and themes for known vulnerabilities using the WPScan database.<br />
– <strong>Compliance Checklist:</strong> provides a checklist of security best practices to help you improve your site’s security posture</p>
<h3>Third party services</h3>
<p>This plugin relies on the following third-party/external services:</p>
<p><strong>Google reCAPTCHA v2</strong><br />
Used to protect the WordPress login forms against automated abuse and spam.<br />
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request.<br />
– Service provider: Google LLC<br />
– Terms of Service: https://www.google.com/intl/en/policies/terms/<br />
– Privacy Policy: https://policies.google.com/privacy</p>
<p><strong>IP-API.com</strong><br />
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP).<br />
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted.<br />
– Service provider: IP-API.com<br />
– Terms of Service: https://ip-api.com/docs/legal<br />
– Privacy Policy: https://ip-api.com/docs/legal</p>
<h3>F.A.Q.</h3>
<p><strong>Does the plugin conflict with security plugins?</strong><br />
No. NIS2 detects other popular security plugins and integrates with them when possible.</p>


NIS2 Compliance

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

CyStack

<p>CyStack Security is a vulnerability scanner and a security monitoring tool designed for WordPress websites. As a cybersecurity company using WordPress as our main web platform, we understand that WordPress administrators and site owners shall not be flooded with tons of security settings, so we made an ultra-lightweight plugin that can be configured easily within just a minute. CyStack Security helps you detect critical security bugs on your website and harden your website security by constantly monitoring it. All security functions run on the CyStack server, which preserves your site’s resources. The plugin protects your website automatically without you breaking a sweat.</p>
<p>CyStack Security plugin is a part of <a href="https://cloud.cystack.net" rel="nofollow ugc">CyStack Cloud Security</a> (CCS) which is a security solution that constantly monitors websites, servers & cloud services to help users fight emerging cyber-threats. This plugin connects to the CCS server to perform the security check remotely and users are required to own a CyStack account before using the plugin.</p>
<ul>
<li>HTTPS monitoring</li>
<li>Blacklist monitoring</li>
<li>Hacking monitoring</li>
<li>DNS change monitoring</li>
<li>Uptime monitoring</li>
<li>Vulnerability scanner (Premium)</li>
</ul>
<h4>WORDPRESS VULNERABILITY SCANNER</h4>
<ul>
<li>Scan your WordPress website for security bugs that might be exploited by hackers</li>
<li>Give you instruction so you can easily work on remediation</li>
<li>Schedule the scan automatically to save your time and effort</li>
<li>New vulnerability signatures added daily by CyStack security engineers</li>
</ul>
<p>Vulnerability Scanner is a premium feature of CyStack Security plugin. It helps site owners scan for critical security bugs on their websites with Fuzzing technology – which, to some extend, is on par with having a dedicated website security team.</p>
<p>When activated, the Scanner will start testing your website with real-world penetration attempts, which reveals your website’s weaknesses that can be exploited by threat actors. It will also give you detailed instructions and references on how to fix the issues for better security.</p>
<p>All features of CyStack Security run automatically on our sever. Just enable the features once to enjoy the next level of security monitoring for your website.</p>
<h4>WEBSITE UPTIME MONITORING</h4>
<ul>
<li>Check your website availability and speed performance every 5 minutes</li>
<li>Instantly notify when downtimes happen</li>
<li>Dashboard report offers performance posture overview</li>
<li>7 servers spread worldwide: Singapore, EU, U.S, Vietnam</li>
</ul>
<p>Uptime Monitoring helps you keep track on your website performance. When activated, CyStack Security check for your website’s response on a 5-minute schedule, which helps detect downtime on your website and notify you instantly. All information is gathered on your dashboard to follow and take further actions.</p>
<h4>WEBSITE HACKING MONITORING</h4>
<p>30.000+ websites are hacked everyday. Our system record all that, and notify you whenever, if happens, your site is there on the hacking list.</p>
<h4>WEBSITE HTTPS MONITORING</h4>
<p>HTTPS is now a security standard for every website as it helps encrypt information send back and forth between your website and user. It’s easy to get HTTPS, but it’s not very convenience remembering to extend the certificate. CyStack Security check for your HTTPS status so you can get notified whenever something go wrong with your HTTPS.</p>
<h4>WEBSITE BLACKLIST MONITORING</h4>
<p>If your site’s SEO performance ever drops drastically, it might be security issues that brings your site into global blacklists. Although we hope that day will never come, but if it does, CyStack Security will notify you first. So you can fix the issues and re-submit your site for blackisting removal.</p>
<h4>DNS CHANGE MONITORING</h4>
<p>You don’t want hackers to change your DNS without you knowing it instantly, that’s why you need CyStack Security to be with you and notify you before bad things happen.</p>


CyStack Security – Vulnerability Scanner & Security Monitoring

CyStack Security constantly monitors your websites and servers to detect security issues and vulnerabilities.

NIS2 Compliance vs CyStack Security – Vulnerability Scanner & Security Monitoring