Hidayat Mahetar

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected.
<h4>Key Features</h4>
<ul>
<li>Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA.</li>
<li>Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux).</li>
<li>Visual File Permissions Map – See a color-coded structure of your site’s file security.</li>
<li>Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal.</li>
<li>Security Dashboard – View a complete overview of your site’s security health.</li>
<li>Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts.</li>
<li>Login & User Security – Monitor login attempts and manage user sessions.</li>
<li>Site Hardening – Apply recommended security tweaks to your WordPress installation.</li>
<li>Code Signing – Verify the integrity of your plugin files.</li>
</ul>
<h3>Detailed Features</h3>
General Security & Server Health:
<ul>
<li>SSL Status – Check if SSL is active for secure connections.</li>
<li>Site Health & Server Info – Displays PHP version, database version, and server details.</li>
<li>Panic Mode – Quickly lock down your site in case of an emergency.</li>
</ul>
Access & User Security:
<ul>
<li>Two-Factor Authentication (2FA):
<ul>
<li>TOTP Support – Use Google Authenticator, Authy, or any TOTP app.</li>
<li>Configurable for All Roles – Require 2FA for specific user roles.</li>
<li>Backup Codes – Generate backup codes for emergency access.</li>
</ul>
</li>
<li>Login Monitoring – Track failed login attempts and monitor user activity.</li>
</ul>
Security Monitoring & Protection:
<ul>
<li>File Permissions Management:
<ul>
<li>Windows Servers – Show file read/write permissions.</li>
<li>Linux Servers – Display numeric file permissions along with current and recommended settings.</li>
<li>Fix Permissions – Select files and fix incorrect permissions directly.</li>
</ul>
</li>
<li>Visual File Permission Map – Interactive file structure with security indicators.</li>
<li>Hardening – One-click security hardening for common WP vulnerabilities.</li>
<li>Code Signing – Ensure plugin files haven’t been tampered with.</li>
</ul>
Malware & Security Scanner:
<ul>
<li>Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API.</li>
<li>Security Header & DNS Scan – Check security headers and DNS settings.</li>
<li>Alert System – Receive alerts for detected threats.</li>
</ul>
WordPress Management & Security:
<ul>
<li>Plugin & Theme Security:
<ul>
<li>Vulnerability Scanner – Check for known security flaws.</li>
<li>Inactive Plugin Alerts – Warns about inactive components that pose risks.</li>
</ul>
</li>
<li>Security Dashboard – A centralized panel for all security settings.</li>
</ul>
<h3>External Services Used</h3>
Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies:
<h3>1. VirusTotal API</h3>
Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats.
What data is sent & when? 
– When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. 
– No user private data is sent—only the target URLs/domains or hash values of files are transmitted.
Terms of Service & Privacy Policy: 
– <a href="https://www.virustotal.com/terms-of-service" rel="nofollow ugc">VirusTotal Terms of Service</a> 
– <a href="https://www.virustotal.com/privacy-policy" rel="nofollow ugc">VirusTotal Privacy Policy</a>

Safe Sites

Safe Sites is a lightweight and powerful plugin. Easy to use, with smart file permission controls and real-time security insights. Highly recommended for keeping your WordPress site secure!

Very Helpful and Easy to Use

Safe Sites is a WordPress security plugin offering real-time monitoring, file permission control, malware scanning, and plugin & theme security.

Funlus Oy

WPLifeCycle gives WordPress admins a single dashboard to see exactly which PHP version a site is running, how long it will stay in active/security support, and what to fix before anything breaks.
Key features
<ul>
<li>PHP version badge with active- and security-support countdowns </li>
<li>Multi-site monitoring — push data to your free WPLifeCycle cloud account </li>
<li>SEO audit – on-page checks and scoring (v 3.0+) </li>
<li>OWASP-based security scan (v 3.0+) </li>
<li>Performance scan (v 3.0+) </li>
<li>Secure Admin Link generator – creates a random, time-boxed /wp-admin URL (v 3.0+) </li>
<li>Hooks scanner & tester – lists add_action / add_filter calls, flags conflicts (v 3.1+) </li>
<li>Plugins monitor – tracks version for every active plugin (v 3.1+)</li>
<li>Admin user Log monitor – tracks all admin visits (v 3.2+)</li>
<li>Core, theme, and plugin updater – manage and trigger updates directly via WPLifeCycle (v3.3+)</li>
<li>Improved API interface – faster and more reliable data sync between your site and WPLifeCycle.com (v3.3+)</li>
<li>One-Click Auto Updates for WordPress Core, Plugins, and Themes (v 4.0+)</li>
<li>Dashboard improvements and enhanced access control (v 4.0+)</li>
</ul>
Built for real-world workflows: minimal setup, async scans that respect server load, and .po/.mo files for quick translation.
<h3>Usage</h3>
<ul>
<li>Open Tools → WPLifeCycle to view PHP version details and run scans. </li>
<li>Click Generate Secure Admin Link to create a one-off login URL. </li>
<li>Use the Send to API toggle if you want this site monitored centrally.</li>
</ul>
<h3>Video</h3>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/uDcyZEi3-Kg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>

WPLifeCycle – Free PHP Version Info & Website Manager

This plugin shows your current PHP version, its lifecycle security support days, and can send version data to the WPLifeCycle for proactive planning.

Safe Sites vs WPLifeCycle – Free PHP Version Info & Website Manager