Mirco Babini

Alfio Piccione

Babini Mazzari

Andrea Capone

NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.
The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.
<h3>Quick and easy setup</h3>
Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.
Available modules are: 
– Activity Logger: logs important events such as user logins, content changes, plugin/theme installations and more. 
– File Integrity Monitoring: monitors core WordPress files, themes and plugins for unauthorized changes. 
– Access Protection: protects login and admin pages with Google reCAPTCHA v2 and limits access 
– Vulnerability Scanner: scans installed plugins and themes for known vulnerabilities using the WPScan database. 
– Compliance Checklist: provides a checklist of security best practices to help you improve your site’s security posture
<h3>Third party services</h3>
This plugin relies on the following third-party/external services:
Google reCAPTCHA v2 
Used to protect the WordPress login forms against automated abuse and spam. 
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request. 
– Service provider: Google LLC 
– Terms of Service: https://www.google.com/intl/en/policies/terms/ 
– Privacy Policy: https://policies.google.com/privacy
IP-API.com 
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP). 
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted. 
– Service provider: IP-API.com 
– Terms of Service: https://ip-api.com/docs/legal 
– Privacy Policy: https://ip-api.com/docs/legal
<h3>F.A.Q.</h3>
Does the plugin conflict with security plugins? 
No. NIS2 detects other popular security plugins and integrates with them when possible.

NIS2 Compliance

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

Peter Butler

The recent Timthumb.php vulnerability (discussed <a href="http://markmaunder.com/2011/08/02/technical-details-and-scripts-of-the-wordpress-timthumb-php-hack/" rel="nofollow ugc">here</a>) has left scores of unsuspecting bloggers hacked. It’s the perfect combination of not so easy to fix for the technically disinclined, and easy to find and exploit for the malicious – resulting in a disastrous number of compromised sites.
The Timthumb Vulnerability Scanner plugin will scan your entire wp-content directory for instances of any outdated and insecure version of the timthumb script, and give you the option to automatically upgrade them with a single click. Doing so will protect you from hackers looking to exploit this particular vulnerability.
After new, lesser vulnerabilities were found, it became apparent that the plugin needs to be dynamic – able to keep you up to date with the latest version of timthumb, without requiring a plugin upgrade. The plugin now checks for the latest available version of timthumb routinely (each time you visit the scanner page, but no more than once a day), and can download and install the latest version, rather than the one included with the plugin. Scans are run daily (unless you disable them via the options link on the scanner page) via wp-cron to keep up with any new plugins or themes you’ve installed.
More info at <a href="http://codegarage.com/blog/2011/09/wordpress-timthumb-vulnerability-scanner-plugin/" rel="nofollow ugc">CodeGarage</a>.
Special thanks to <a href="http://jacobwg.com/" rel="nofollow ugc">Jacob Gillespie</a> for help with the bulk upgrade feature.

Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

NIS2 Compliance vs Timthumb Vulnerability Scanner