Mirco Babini

Alfio Piccione

Babini Mazzari

Andrea Capone

<p>NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.</p>
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
<p>NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.</p>
<p>The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.</p>
<h3>Quick and easy setup</h3>
<p>Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.</p>
<p>Available modules are:<br />
– <strong>Activity Logger:</strong> logs important events such as user logins, content changes, plugin/theme installations and more.<br />
– <strong>File Integrity Monitoring:</strong> monitors core WordPress files, themes and plugins for unauthorized changes.<br />
– <strong>Access Protection:</strong> protects login and admin pages with Google reCAPTCHA v2 and limits access<br />
– <strong>Vulnerability Scanner:</strong> scans installed plugins and themes for known vulnerabilities using the WPScan database.<br />
– <strong>Compliance Checklist:</strong> provides a checklist of security best practices to help you improve your site’s security posture</p>
<h3>Third party services</h3>
<p>This plugin relies on the following third-party/external services:</p>
<p><strong>Google reCAPTCHA v2</strong><br />
Used to protect the WordPress login forms against automated abuse and spam.<br />
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request.<br />
– Service provider: Google LLC<br />
– Terms of Service: https://www.google.com/intl/en/policies/terms/<br />
– Privacy Policy: https://policies.google.com/privacy</p>
<p><strong>IP-API.com</strong><br />
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP).<br />
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted.<br />
– Service provider: IP-API.com<br />
– Terms of Service: https://ip-api.com/docs/legal<br />
– Privacy Policy: https://ip-api.com/docs/legal</p>
<h3>F.A.Q.</h3>
<p><strong>Does the plugin conflict with security plugins?</strong><br />
No. NIS2 detects other popular security plugins and integrates with them when possible.</p>


NIS2 Compliance

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

FireFart

ethicalhack3r

Erwan Le Rousseau

<p><strong>Please note:</strong> This plugin is no longer actively supported for non-enterprise customers. <strong>We recommend using <a href="https://wordpress.org/plugins/jetpack-protect/" rel="ugc">Jetpack Protect</a></strong> – a free security plugin for WordPress that leverages the extensive database of WPScan. Jetpack Protect scans your site and warns you about vulnerabilities, keeping your site one step ahead of security threats and malware.</p>
<p>The WPScan WordPress security plugin is unique in that it uses its own manually curated <a href="https://wpscan.com/" rel="nofollow ugc">WPScan WordPress Vulnerability Database</a>. The vulnerability database has been around since 2014 and is updated on a daily basis by dedicated WordPress security specialists and the community at large. The database includes more than 21,000 known security vulnerabilities. The plugin uses this database to scan for <a href="https://wpscan.com/wordpresses" rel="nofollow ugc">WordPress vulnerabilities</a>, <a href="https://wpscan.com/plugins" rel="nofollow ugc">plugin vulnerabilities</a> and <a href="https://wpscan.com/themes" rel="nofollow ugc">theme vulnerabilities</a>, and has the options to schedule automated daily scans and to send email notifications.</p>
<p>WPScan has a Free API plan that should be suitable for most WordPress websites, however, also has paid plans for users who may need more API calls. To use the WPScan WordPress Security Plugin you will need to use a free API token by <a href="https://wpscan.com/" rel="nofollow ugc">registering here</a>.</p>
<p><strong>The Free plan allows 25 API requests per day. View the different available <a href="https://wpscan.com/api" rel="nofollow ugc">API plans</a>.</strong></p>
<h4>How many API requests do you need?</h4>
<ul>
<li>Our WordPress scanner makes one API request for the WordPress version, one request per installed plugin and one request per installed theme.</li>
<li>On average, a WordPress website has 22 installed plugins.</li>
<li>The Free plan should cover around 50% of all WordPress websites.</li>
</ul>
<h4>Security Checks</h4>
<p>The WPScan WordPress Security Plugin will also check for other security issues, which do not require an API token, such as:</p>
<ul>
<li>Check for debug.log files</li>
<li>Check for wp-config.php backup files</li>
<li>Check if XML-RPC is enabled</li>
<li>Check for code repository files</li>
<li>Check if default secret keys are used</li>
<li>Check for exported database files</li>
<li>Weak passwords</li>
<li>HTTPS enabled</li>
</ul>
<h4>What does the plugin do?</h4>
<ul>
<li>Scans for known WordPress vulnerabilities, plugin vulnerabilities and theme vulnerabilities;</li>
<li>Does additional security checks;</li>
<li>Shows an icon on the Admin Toolbar with the total number of security vulnerabilities found;</li>
<li>Notifies you by mail when new security vulnerabilities are found.</li>
</ul>
<h4>Further Reading</h4>
<ul>
<li><a href="https://wpscan.com/" rel="nofollow ugc">WPScan WordPress Vulnerability Database</a></li>
<li><a href="https://wpscan.com/wordpress-security-scanner" rel="nofollow ugc">WPScan WordPress Security Scanner</a></li>
<li><a href="https://twitter.com/_wpscan_" rel="nofollow ugc">WPScan Twitter</a></li>
</ul>


WPScan – WordPress Security Scanner

One of the Must-have security plugin for WordPress Websites. Most importantly baked by Wp Scan Team, Which is in field from way too long and helping community to be safe like a pro. 

They have helped us with their deep knowledge of WordPress Security in one of our products. Their whole intention is to use their security experience to help WordPress Community to be safe. We highly recommended this plugin and whole team for any thing related to security.

Great Minds Made Great Plugin


complete garbage now, used to be amazing now they basically force you to use jetpack.  No replies trying to get enterprise license, another great product (used to be) that automattic has killed and used just for leads to jetpack


Garbage now

WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.

NIS2 Compliance vs WPScan – WordPress Security Scanner