Mirco Babini

Alfio Piccione

Babini Mazzari

Andrea Capone

<p>NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.</p>
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
<p>NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.</p>
<p>The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.</p>
<h3>Quick and easy setup</h3>
<p>Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.</p>
<p>Available modules are:<br />
– <strong>Activity Logger:</strong> logs important events such as user logins, content changes, plugin/theme installations and more.<br />
– <strong>File Integrity Monitoring:</strong> monitors core WordPress files, themes and plugins for unauthorized changes.<br />
– <strong>Access Protection:</strong> protects login and admin pages with Google reCAPTCHA v2 and limits access<br />
– <strong>Vulnerability Scanner:</strong> scans installed plugins and themes for known vulnerabilities using the WPScan database.<br />
– <strong>Compliance Checklist:</strong> provides a checklist of security best practices to help you improve your site’s security posture</p>
<h3>Third party services</h3>
<p>This plugin relies on the following third-party/external services:</p>
<p><strong>Google reCAPTCHA v2</strong><br />
Used to protect the WordPress login forms against automated abuse and spam.<br />
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request.<br />
– Service provider: Google LLC<br />
– Terms of Service: https://www.google.com/intl/en/policies/terms/<br />
– Privacy Policy: https://policies.google.com/privacy</p>
<p><strong>IP-API.com</strong><br />
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP).<br />
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted.<br />
– Service provider: IP-API.com<br />
– Terms of Service: https://ip-api.com/docs/legal<br />
– Privacy Policy: https://ip-api.com/docs/legal</p>
<h3>F.A.Q.</h3>
<p><strong>Does the plugin conflict with security plugins?</strong><br />
No. NIS2 detects other popular security plugins and integrates with them when possible.</p>


NIS2 Compliance

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

te_taipo

<h4>PARETO SECURITY FEATURES</h4>
<p>Had enough of the security theatre presented by the raft of WordPress security plugins? Time to put a stop to the attacks!</p>
<p>Firstly WordPress and most other CMS\’s are built using PHP. PHP is a very insecure programming language, even worse in the hands of amateurs.</p>
<p>WordPress has been plagued by plugins authored by amateurs that bring with them security vulnerabilities.</p>
<p>Security plugin designers mostly focus on cleaning up attacks rather than stopping them dead in their tracks.</p>
<p>Pareto Security class acts as a Central Security Hub checking all inputs from users, preventing bad requests from executing on your website.</p>
<ul>
<li>Real Attack Prevention that can be achieved via a plugin</li>
<li>Automatic Blacklist Management</li>
<li>Easy-To-Use</li>
<li>No customisation needed</li>
<li>Works silently, you only get notified when you really want to be notified</li>
<li>Completely Free</li>
<li>and much more…</li>
</ul>
<h4>PARETO SECURITY PROTECTION</h4>
<ul>
<li>Pareto Security Protection identifies and blocks malicious traffic.</li>
<li>Pareto Security Protection dynamic IP Blacklist protects your site while reducing load.</li>
<li>Protects your site at the entry-point, disabling attack peneration of your WordPress site.</li>
<li>Extends WordPress inbuilt security, defends your website against vulnerabilities added in via bad plugin coding.</li>
<li>[disabled] Optionally prevent Tor users/bots from interacting with login forms and search functions of your site while still allowing them to <em>view</em> your site.</li>
<li>Optionally only allow standard web clients and trusted crawlers to access your website, discouraging others from doing so.</li>
</ul>
<h4>PARETO SECURITY TOOLS</h4>
<ul>
<li>Monitor blocked attack attempts</li>
<li>Optionally receive notifications of <em>REAL</em> attack attempts that Pareto Security has blocked</li>
</ul>
<h4>A Word on Security:</h4>
<p>By the very nature of plugins, no plugin should ever claim to be a Web Application Firewall.</p>
<p>No security plugin can save your website from really-really badly written site, theme and/or plugin code.</p>
<p>No security plugin can save your site from attacks that result from when administrators do not follow basic security practices.</p>
<p>Keeping any CMS as secure as possible is not easy. The very best thing you can do to prevent attacks is to always keep your website code, themes and plugins up to date, and remove any plugins and themes you are not using.</p>


Pareto Security

WordPress Core Security: Secure your website with real security.

NIS2 Compliance vs Pareto Security