Mirco Babini

Alfio Piccione

Babini Mazzari

Andrea Capone

NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.
The plugin also provides the NIS2 Compliance Status block for showing a public-facing compliance badge and score in the block editor.
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.
The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.
<h3>Quick and easy setup</h3>
Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.
Available modules are: 
– Activity Logger: logs important events such as user logins, content changes, plugin/theme installations and more. 
– File Integrity Monitoring: monitors core WordPress files, themes and plugins for unauthorized changes. 
– Access Protection: protects login and admin pages with Google reCAPTCHA v2 and limits access 
– Vulnerability Scanner: scans installed plugins and themes for known vulnerabilities using the WPScan database. 
– Compliance Checklist: provides a checklist of security best practices to help you improve your site’s security posture
<h3>Third party services</h3>
This plugin relies on the following third-party/external services:
Google reCAPTCHA v2 
Used to protect the WordPress login forms against automated abuse and spam. 
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request. 
– Service provider: Google LLC 
– Terms of Service: https://www.google.com/intl/en/policies/terms/ 
– Privacy Policy: https://policies.google.com/privacy
IP-API.com 
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP). 
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted. 
– Service provider: IP-API.com 
– Terms of Service: https://ip-api.com/docs/legal 
– Privacy Policy: https://ip-api.com/docs/legal
<h3>F.A.Q.</h3>
Does the plugin conflict with security plugins? 
No. NIS2 detects other popular security plugins and integrates with them when possible.

NIS2 Compliance

This plugin is straight to the point: NIS2 compliance requirements satisfied.


Not just a lightweight security alternative

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

OOPSpam Team

OOPVulns is a modern, accessible WordPress plugin that continuously monitors your site for known security vulnerabilities in WordPress core, plugins, and themes.
<h4>Features</h4>
<ul>
<li>Comprehensive Scanning Scans WordPress core, all plugins, and all themes for known vulnerabilities</li>
<li>Explicit Opt-In Vulnerability scanning is disabled by default and only runs after admin consent</li>
<li>Automatic Scans Configurable daily or weekly automatic scanning</li>
<li>Email Notifications Get notified when vulnerabilities are detected</li>
<li>Modern Dashboard Clean, accessible admin interface with detailed vulnerability information</li>
<li>Severity Indicators Color-coded severity levels (Critical, High, Medium, Low)</li>
<li>Update Guidance See which vulnerabilities have fixes available</li>
</ul>
<h4>How It Works</h4>
The plugin checks your installed WordPress core version, plugin versions, and theme versions against the OOPSpam vulnerability database. When a known vulnerability is found, you’ll see it in the dashboard and optionally receive an email notification.
<h4>External Service</h4>
This plugin connects to the OOPSpam API to retrieve vulnerability information. When a scan runs, the following data is sent:
<ul>
<li>WordPress core version</li>
<li>Plugin slugs and versions</li>
<li>Theme slugs and versions</li>
</ul>
No personal data, user information, or site content is transmitted. 
Vulnerability API checks are disabled by default and only run after an administrator explicitly enables scanning in plugin settings.
<ul>
<li><a href="https://www.oopspam.com/terms" rel="nofollow ugc">OOPSpam Terms of Service</a></li>
<li><a href="https://www.oopspam.com/privacypolicy" rel="nofollow ugc">OOPSpam Privacy Policy</a></li>
</ul>

OOPVulns: Vulnerability Scanner

Monitor your WordPress site for security vulnerabilities in core, plugins, and themes.

NIS2 Compliance vs OOPVulns: Vulnerability Scanner