Mirco Babini

Alfio Piccione

Babini Mazzari

Andrea Capone

<p>NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.</p>
<p>The plugin also provides the <strong>NIS2 Compliance Status</strong> block for showing a public-facing compliance badge and score in the block editor.</p>
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
<p>NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.</p>
<p>The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.</p>
<h3>Quick and easy setup</h3>
<p>Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.</p>
<p>Available modules are:<br />
– <strong>Activity Logger:</strong> logs important events such as user logins, content changes, plugin/theme installations and more.<br />
– <strong>File Integrity Monitoring:</strong> monitors core WordPress files, themes and plugins for unauthorized changes.<br />
– <strong>Access Protection:</strong> protects login and admin pages with Google reCAPTCHA v2 and limits access<br />
– <strong>Vulnerability Scanner:</strong> scans installed plugins and themes for known vulnerabilities using the WPScan database.<br />
– <strong>Compliance Checklist:</strong> provides a checklist of security best practices to help you improve your site’s security posture</p>
<h3>Third party services</h3>
<p>This plugin relies on the following third-party/external services:</p>
<p><strong>Google reCAPTCHA v2</strong><br />
Used to protect the WordPress login forms against automated abuse and spam.<br />
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request.<br />
– Service provider: Google LLC<br />
– Terms of Service: https://www.google.com/intl/en/policies/terms/<br />
– Privacy Policy: https://policies.google.com/privacy</p>
<p><strong>IP-API.com</strong><br />
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP).<br />
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted.<br />
– Service provider: IP-API.com<br />
– Terms of Service: https://ip-api.com/docs/legal<br />
– Privacy Policy: https://ip-api.com/docs/legal</p>
<h3>F.A.Q.</h3>
<p><strong>Does the plugin conflict with security plugins?</strong><br />
No. NIS2 detects other popular security plugins and integrates with them when possible.</p>


NIS2 Compliance

This plugin is straight to the point: NIS2 compliance requirements satisfied.


Not just a lightweight security alternative

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

Amrit Anandh

Kuppuraj

revmakx

<h3>Instant protection against disclosed vulnerabilities</h3>
<p><a href="https://defendwp.org/" rel="nofollow ugc">DefendWP.org</a> is a WordPress plugin that protects your website from hackers exploiting vulnerable code on your website. Security research companies discover vulnerabilities and notify plugin developers to patch them. After some time, they disclose the vulnerability to the public, allowing you to update your plugins. However, this system has flaws. Once vulnerabilities are publicly disclosed, hackers rush to exploit the sites in which you haven’t yet applied the patch.</p>
<h4>A Better Approach: Immediate Protection for All Users</h4>
<p>To solve this, our plugin pushes firewall rules and patches as soon as vulnerabilities are disclosed, ensuring websites are protected without waiting for an official patch. This protection is silent and automatic, ensuring that you are not affected even if you don’t take any immediate action.</p>
<ol>
<li>Immediate Patches Upon Disclosure: When vulnerabilities are disclosed, our plugin pushes patches or firewall rules that prevent exploitation.</li>
<li>Silent Protection: We operate in the background, allowing plugin developers to roll out patches at their own pace without compromising user security.</li>
<li>Free and Accessible: Security should not be a privilege. Our plugin is free and accessible and ensures that all WordPress users are protected from newly disclosed vulnerabilities.</li>
</ol>
<h3>Protecting Everyone, Not Just the Privileged Few</h3>
<p>Security should not be reserved for those who can afford premium services. The spirit of WordPress is inclusivity, and this should extend to security as well. When vulnerabilities are disclosed, they pose a risk to every website, regardless of its owner’s resources. Every WordPress user should have access to immediate protection.</p>
<p>Security researchers play a vital role in identifying vulnerabilities, but the current system leaves too many users exposed. Our approach aims to create a safer WordPress ecosystem for all, by closing the gap between vulnerability disclosure and patching.</p>
<p>This isn’t about taking credit—it’s about prioritizing the safety of small business owners, bloggers, and entrepreneurs who rely on WordPress. By silently closing the vulnerability gap, we aim for a future where WordPress security is accessible to everyone.</p>
<p>Let’s build a safer WordPress ecosystem together—one that protects all users, not just the privileged few.</p>
<h4>For plugin authors: Report a Vulnerability</h4>
<p>Do you have an active vulnerability in your plugin you want to safeguard users from? Report it <a href="https://defendwp.org/submit-a-vulnerability/" rel="nofollow ugc">here</a></p>
<h4>Support</h4>
<p>Need help with your website’s security? Just send us an email at <a href="mailto:help@defendwp.org" rel="nofollow ugc">help@defendwp.org</a>.</p>
<h4>Note</h4>
<p>This plugin utilizes the <a href="https://api.ipify.org?format=json" rel="nofollow ugc">Ipify.org</a> to provide enhanced functionality. The API allows the plugin to retrieve the exact IP of the current user, which will be used to determine whether the user can access the WordPress site.<a href="https://ipify.org" rel="nofollow ugc">Privacy policy</a></p>
<p>Vulnerabilities, IPs, Plugins and Themes data will be sent between <a href="https://defendwp.org" rel="nofollow ugc">DefendWP.org</a> and the WP site to instantly patch from vulnerabilities.</p>


DefendWP Firewall

Get instant protection against vulnerabilities disclosed by security companies.

NIS2 Compliance vs DefendWP Firewall