Julio Potier

Grégory Viguier

SecuPress

superment

<h4>Test it now!</h4>
You can <a href="https://demo.tastewp.com/secupress/" rel="nofollow ugc">test SecuPress Free now</a>.
<h4>YOU MADE IT, WE KEEP IT SAFE!</h4>
The most advanced WordPress Protection on the market. SecuPress is focused on WordPress attacks and Malwares, not just “usual web protections” like many.
Protect your WordPress with malware scans ; block bots & suspicious IPs. Get a complete <a href="https://secupress.me/" rel="nofollow ugc">WordPress security toolkit</a> for free or as a pro plugin. SecuPress is GDPR compliant.
What’s the difference between free and pro version? 
If you are proactive, our free WordPress security plugin is a great choice! No time to activate weekly scans? Then <a href="https://secupress.me/" rel="nofollow ugc">SecuPress pro</a> is the way to go. Our plugin takes care of everything with automated tasks.
<h4>Here are some of our most popular features:</h4>
<ul>
<li>Brute Force Login Protection</li>
<li>Password Spraying Protection</li>
<li>Firewall features</li>
<li>Security alerts (1)</li>
<li>Malware Scanner (1)</li>
<li>Block country by geolocation (1)</li>
</ul>
<h4>We have included some features you won’t find in most WordPress security plugins:</h4>
<ul>
<li>Protection of Security Keys</li>
<li>Block visits from Bad Bots</li>
<li>Vulnerable Plugins & Themes detection (1)</li>
<li>Security Reports in PDF format (1)</li>
</ul>
You can check out <a href="https://secupress.me/faq/" rel="nofollow ugc">Frequently Asked Questions</a> or get in touch with our <a href="https://secupress.me/support/" rel="nofollow ugc">support</a>. Want to know all about SecuPress? You can read our documentation here: <a href="https://docs.secupress.me" rel="nofollow ugc">docs.secupress.me</a>.
How will you know it works? 
Well, we have a dedicated security scanner that will give you a clear security grade and report for your website. This way, you’ll know exactly what to fix.
<h4>WordPress Features</h4>
Security Audit 
SecuPress is the only plugin with a full scanner able to fix the issues for you. And when it requires a decision from you, it will ask you before proceeding. With this feature, you can check 35 security points in 5 minutes and let us take care of the rest.
Once done, you get a security grade that gives you a clear idea of what your security level is. You can export this analysis in PDF format to share with others (clients or colleagues) (1).
Users & Login 
This feature is the easiest way to make sure your users’ data is protected and to keep their accounts from being compromised. With this feature you can limit the number of bad login attempts, ban non-existing usernames login attempts and set a non-login time slot. SecuPress also makes sure you control the sessions of your users.
SecuPress also adds a <a href="https://secupress.me/blog/two-factor-authentication/" rel="nofollow ugc">2FA</a> (Two Factor Authentication) because it’s almost a mandatory feature when it comes to WordPress security!
The plugin also gives you greater user and password control as you can set:
<ul>
<li>Password lifetimes for your users.</li>
<li>Enforce strong password use.</li>
<li>Forbid the use of vague usernames like www or admin.</li>
</ul>
Tired of bots finding your WordPress login page? Finally, don’t let bots find your login page, just move it with the famous Move Login plugin, now included in SecuPress.
Plugins and Themes 
SecuPress helps you detect themes and plugins that are vulnerable or that have been tampered with to include malicious code. If you install one of these, your security module will send out an email alert and give you a warning in WordPress.
SecuPress takes security further by limiting plugin activation, deactivation, installation and removal in your production (live) website. Plugin and theme uploads via .zip files will be on lockdown as well to block off this easy hacking route.
WordPress Core 
SecuPress reinforces the WordPress Core to keep it safe. The security plugin optimizes what’s under the hood to secure the config file by setting the proper parameters.
Sensitive Data 
SecuPress secures content in many ways:
<ul>
<li>The plugin secures WordPress Endpoints and APIs by blocking bad requests for XML-RPC or REST API.</li>
<li>It blocks bad bots with its Robots Blackhole feature.</li>
<li>It provides an anti-hotlink feature to preserve your bandwidth.</li>
<li>The plugin packs 7 anti-disclose security modules to make sure no precious information is available to hackers in your PHP or WordPress itself.</li>
<li>Profile and SecuPress settings pages are password protected to keep sensitive information away from prying eyes.</li>
</ul>
Firewall
<ul>
<li>SecuPress is one of the most efficient WordPress bouncer you’ll ever see!</li>
<li>The plugin blocks malicious incoming requests.</li>
<li>It blocks bad User Agents (no bad crawlers allowed).</li>
<li>Bad requests methods also get the boot in a single click.</li>
<li>URLs are kept in check: no bad URL contents.</li>
<li>SQL injection scanners are kept out as well.</li>
<li>Brute force attempts are stopped in their tracks.</li>
<li>GeoIP Blocking by country gives you more control over your traffic.</li>
</ul>
Malware Scan 
SecuPress has a unique malware scan developed by our security experts. It hunts down bad files and provides you with an easy step-by-step report that lets you take action. It looks into:
<ul>
<li>Bad files in your FTP.</li>
<li>Your uploads folder for dangerous files.</li>
<li>Potential phishing attempts via <code>index.php</code> loads.</li>
</ul>
Backups 
We know firsthand how painful it is to pick up the pieces after an attack damages your WordPress. SecuPress preserves your data to help you avoid lost content or settings if your website comes under attack. The plugin backs up your database and files and lets you download them to guarantee you peace of mind.
Anti Spam 
Did you know that 60% of the traffic on the Internet is generated by bots? Most of them happen to be spam bots. We developed our own anti-spam system that works quietly in the background. Just activate it and enjoy a spam free experience.
Alerts 
Alerts are an essential tool when your website is under attack. When something important happens on your website, SecuPress will send you an alert via email. We’re working on alerts via SMS, Slack & Twitter as well.
You also receive a daily report that provides a debrief of the attempted attack and all the activities blocked by SecuPress.
Scheduled Security Tasks 
SecuPress can run 3 separate scheduled tasks for you. It’s like having a security patrol on your WordPress.
Scheduled Scanner: SecuPress scans your website to detect any issues. After the scan is complete, you get a report in your inbox outlining any actions you have to take to protect your website. 
Scheduled Backup: our team knows that everyone at one time or another forgets to back things up. We made it an automatic task to help ensure you always can recover from an attack with your content safe. 
Scheduled Malware Scan: this security feature scans your website at regular intervals to hunt down any malware that may have gotten into your WordPress.
Logs 
SecuPress will keep a log of important security activities and 404 pages triggered by users, bots or even Chuck Norris. This lets you keep an eye on what’s going on in your WordPress at any time. You can also control banned IPs from this option.
(1) Available in the <a href="https://secupress.me/features/" rel="nofollow ugc">Pro Version</a>.
(SecuPress est une extension de sécurité WordPress française)
<h3>TODO</h3>
Create a trust score for each non WP file and displays it 
Create a “suspicious” status for alerts 
Revamp alerts 
Revamp logs 
Add http logs 
PHP 8.O min 
replace %s by ###USERNAME### in emails 
.htaccess scanner 
login rest disclose scanner 
move EDD updater+white label into a mu to allow upgrade+rollback even with plugin deactivated 
give possibility to rename logins 
target=”_blank” on doc links

SecuPress with Simple SSL – Simple and Performant Security


J'utilise SecuPress depuis un moment maintenant et il est vraiment bien fait et efficace, je recommande !


Super plugin !


Jusqu'à présent, je l'installais sur tous mes sites mais ces derniers temps, trop de bugs et des mises à jour toutes les semaines. La version 2.3.16.1 m'a fait perdre une matinée entière pour downgrader à la version 2.3.15 et cerise sur le gateau j'ai du reconfiguré chaque site. 



Déçu..



J'espère que l'avenir me fera revenir sur cet avis, en attendant je vais surement me diriger vers une autre solution.


Trop de bugs ces derniers temps

Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.

WPMU DEV - Your All-in-One WordPress Platform

Defender adds the best in WordPress plugin security to your website with just a few clicks, including malware scanner, firewall, password protection, and login security features. Stop brute force login attacks, weak password usage, SQL injections, cross-site scripting (XSS), and other WordPress security vulnerabilities and hacks with Defender’s malware scanner, providing antivirus scans, IP blocking, firewall, activity log, security log, and two-factor authentication (2FA) login security.
No more complex security settings, Defender’s malware scanner, firewall, and login security features add all the hardening and security you need.
Defender is brought to you by the WordPress speed specialists that created Smush image optimization, now active on more than +1 million websites.
Plus, connect for free to WPMU DEV’s AntiBot Global Firewall to block harmful IPs with data from over 500,000 sites.
Enjoy complete site protection from malware, vulnerabilities, bot attacks, and session hijacking from the start with <a href="https://wpmudev.com/project/wp-defender/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme-above-the-fold&utm_content=wp_defender_pro" rel="nofollow ugc">Defender Pro</a>.
Level up security immediately with exclusive Pro features like scheduled malware scanning, Safe Repair for suspicious files, and known WordPress vulnerability detection. <a href="https://wpmudev.com/project/wp-defender/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme-above-the-fold&utm_content=wp_defender_pro" rel="nofollow ugc">Learn more about Pro</a>.
<h3>Security Recommendations</h3>
Defender’s one-click security hardening recommendations instantly adds layers of protection and security to your site.
<h3>Enhance Security and Block Hackers At Every Level:</h3>
<ul>
<li>Malware Scanner – Scan WordPress core files for modifications and unexpected changes which may be caused by malware. Scan for malware and tighten up the security of your files.</li>
<li>Outdated & Removed Plugins – Scans for plugins removed from WordPress.org or not updated in 2+ years.</li>
<li>AntiBot Global Firewall – Connect for free to WPMU DEV to block harmful IPs with data from over 500,000 sites.</li>
<li>WordPress Security Firewall – Block or allowlist IPs, implement IP blocking, and Geo IP blocking, user agent banning and protect against brute force attacks.</li>
<li>Two-Factor Authentication (2FA) – Easily set up better security with 2FA to prevent most login attacks such as brute force, App verification, backup codes, lost device email, WooCommerce 2FA, and Web Authentication.</li>
<li>Login Masking – Change the location of WordPress’s default login area to improve login security.</li>
<li>Login Lockout – Failed login attempts lockout for even more security assurance.</li>
<li>User Agent Banning – Fortify security by blocking bad bots and user agents from accessing your site.</li>
<li>Security Headers – Add an extra layer of defense security and protect against common attacks like: XSS, code injection, and more.</li>
<li>404 Detection Security – Automated block of bot IPs.</li>
<li>Security Configs – Create your ideal Defender security plugin settings and export / import saved configs to any other site.</li>
<li>Geolocation IP Lockout Security – Block users based on location and country (IP blocking).</li>
<li>Disable Trackbacks And Pingbacks – Disable these notifications to enhance spam protection and site security.</li>
<li>Core And Server Update Security Recommendations – Stay on top of your system security.</li>
<li>Antivirus Scan – Scan for active security threats, viruses, and other malware.</li>
<li>Disable File Editor – If they get in, they won’t get far.</li>
<li>Hide Error Reporting – Hide code errors on the frontend so hackers can’t exploit site security.</li>
<li>Update Security Keys – Update old WordPress security keys to be more encrypted and provide better security.</li>
<li>Prevent Information Disclosure – Improve server security and protect sensitive files by locking down specific file types.</li>
<li>Prevent PHP Execution – Defender bolsters security by automatically preventing any PHP code from being executed.</li>
<li>Bulk Apply Security Recommendations – Apply multiple recommended security improvements at once for quicker site hardening.</li>
<li>Google reCAPTCHA Security – Easy to add, stop fraud and abuse – including BuddyPress and WooCommerce.</li>
<li>Cloudflare Turnstile – Protect your site from spam and automated attacks without annoying captchas.</li>
<li>Pwned Password Check – Increase security by protecting against compromised passwords.</li>
<li>Force Password Reset – Force users with selected roles to reset passwords.</li>
<li>Force Strong Passwords – Ensure users create secure credentials by enforcing robust password requirements.</li>
<li>User Agent Blocklist Presets – Easily block unwanted bots and scripts using curated user agent presets.</li>
<li>Known Vulnerability & Suspicious Code Scan (Pro Only) – Scan WordPress core, themes, and plugins for vulnerabilities and harmful code.</li>
<li>Malicious Bot Detector (Pro Only) – Block malicious bots with layered defenses, including traps for bots that ignore robots.txt and checks for fake crawlers posing as search engines.</li>
<li>Google Blocklist Monitoring (Pro Only) – Get instant alerts if your site is flagged by Google.</li>
<li>Session Protection (Pro Only) – Stop session hijacking and prevent unauthorized account access.</li>
<li>Safe Repair For Suspicious Files (Pro Only) – Restore or replace compromised files safely with a single click.</li>
<li>Automated Reports (Pro Only) – Receive scheduled security reports straight to your inbox.</li>
</ul>
<h3>Learn The Ropes With These Hands-On Defender Security Plugin Tutorials</h3>
<ul>
<li><a href="https://wpmudev.com/blog/how-to-get-the-most-out-of-defender-security/" rel="nofollow ugc">How to Get the Most Out of Defender Security</a></li>
<li><a href="https://wpmudev.com/blog/stop-hackers-with-defender-wordpress-security-plugin/" rel="nofollow ugc">How to Stop Hackers in Their Tracks with Defender Security</a></li>
<li><a href="https://wpmudev.com/blog/delete-suspicious-code-defender/" rel="nofollow ugc">Find Out if You’re Hacked: How to Find and Delete Suspicious Code with Defender Security</a></li>
<li><a href="https://wpmudev.com/blog/defender-ip-address-lockout-firewall/" rel="nofollow ugc">How to Create a Powerful and Secure Customized Firewall with Defender Security</a></li>
</ul>
<h3>WordPress Security Scans</h3>
Defender’s malware scanner security checks for suspicious code and malware. It also compares your WordPress install with the WP directory master copy, and reports any changes so you can restore the original file with a click.
<h3>Two-Factor Authentication (2FA) Security</h3>
Easily add an extra layer of protection and security to your WordPress sites with Defender’s two-factor authentication (2FA) features. Including: mobile app verification (Google Authenticator, Microsoft Authenticator, Authy), backup code generation, lost device emails, WooCommerce 2FA, Biometric Authentication (fingerprint/facial recognition), and Hardware Key Authentication (USB security keys). Easily prevent brute force attacks and login security vulnerabilities.
<h3>Login Protection</h3>
Brute force attacks are no match for Defender’s login security. Limit login attempts so hackers can’t guess passwords. Permanently ban IPs or trigger a timed lockout after a set number of failed login attempts. Use Geo IP blocking to ban users from specific countries or locations.
<h3>Firewall Security and IP Manager</h3>
Improve your website security with Defender’s IP manager and firewall. Manually block specific IPs, import a list of banned IPs, and set automated timed and permanent lockouts. Defender makes it easy to block and unblock specific locations quickly thanks to its advanced firewall security(WAF) offering Geographical IP blocking.
<h3>User Agent Banning</h3>
Add user agents to the block or allowlist and stop bad bots from spamming and scraping your site. All major search engines and special network bots are allow-listed out of the box. Easy to set up, Defender’s user agent banning tool now includes built-in bot and script presets to help you quickly block malicious traffic. It does all the security work for you—no editing of the .htaccess file required.
<h3>Google reCAPTCHA Integration</h3>
Add reCAPTCHA security to your login / registration pages, lost password forms, and post comments in a couple of steps to up security and help protect from fraud and abuse. Select reCAPTCHA type, language, location, and style to suit. As well as Google, Defender also supports the following reCAPTCHA types:
<ul>
<li>BuddyPress reCAPTCHA</li>
<li>WooCommerce reCAPTCHA</li>
</ul>
<h3>Login Screen Masking</h3>
Defender makes it easy to move your login screen to a custom URL. Not only does login screen masking improve security, but it also lets you white label your login user experience and improves branding.
<h3>Force Password Reset</h3>
Enhance site security by forcing all users with selected roles to reset their password at any time. Especially helpful if you suspect a possible data breach on your site.
<h3>Security Headers</h3>
Protect your site against common attacks, such as: XSS, code injection, cross site scripting, and more. Enable the following security headers:
<ul>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Strict Transport</li>
<li>Referrer Policy</li>
<li>Permissions-Policy</li>
</ul>
<h3>404 Limiter</h3>
Detect when bots are being used to scan your site for security vulnerabilities and shut them down. The 404 limiter lets you stop the scan by detecting when a bot keeps visiting pages that do not exist, which can also save you from a giant strain on your site’s performance.
<h3>Security Notifications and Reports</h3>
Defender runs surveillance and sends security notifications with information that matters. All activity and notifications are recorded in the activity log to let you see at a glance the website security actions that have been taken by the Defender security plugin.
<h3>Reduce Security Setup Time With Saved Configs</h3>
Save your Defender security plugin configurations and reapply them to your other sites in just a few clicks. You can create and save an unlimited number of security configurations.
<h3>Pwned Password Check</h3>
Entered passwords are checked against public database breach records to further boost security. If a password is identified as compromised, the user will be asked to change it.
<h3>Custom IP Block/Allowlist</h3>
Create your IP block/allow list once, then apply and automatically sync it to all your other sites with just a single click. Save hours by not having to manually add IPs to each individual site. *Note: a [free WPMU DEV account] (https://wpmudev.com/register) is required to access this feature.
<h3>What Do People Say About Defender?</h3>
★★★★★ 
“I found other pro security plugins a bit too fiddly for my taste…I’m delighted with Defender” – <a href="https://profiles.wordpress.org/keithadv" rel="nofollow ugc">KeithADV</a>
★★★★★ 
“Thank you for bringing back a free and easy to use 2-Factor Authentication after Clef! Defender helps keep me aware of my site’s security.” – <a href="https://wordpress.org/support/users/awijasa/" rel="ugc">awijasa</a>
★★★★★ 
“Defender’s interface is very intuitive with warnings that are very helpful” – <a href="https://wpmudev.com/profile/djohns" rel="nofollow ugc">djohns</a>
★★★★★ 
“Defender Recently blocked over 3000 attacks in one week without any noticeable impact on the website. WPMUDEV knocking it out of the park on this one.” – <a href="https://wpmudev.com/profile/davidoswald/" rel="nofollow ugc">David Oswald</a>
<h3>Secure Websites, More Trust, Better Profit</h3>
If you’re running a business website or eCommerce store, privacy, security, uptime and trust are essential.
The Defender security plugin is here to help you: it’s a one of a kind WordPress security plugin that makes web security easy for anyone, for free!
<ul>
<li>Malware scanner</li>
<li>Google two-factor authentication (2FA)</li>
<li>Web Authentication</li>
<li>Firewall setup and configuration</li>
<li>One-click site hardening and security tweaking</li>
<li>WordPress core file scanning and repair</li>
<li>Ongoing firewall security</li>
<li>Google reCAPTCHA</li>
<li>Security headers</li>
<li>One-click security configs</li>
<li>Login Screen Masking</li>
<li>Pwned Password Check</li>
<li>IP Blocklist manager and logging</li>
<li>Geo IP blocking</li>
<li>User agent banning</li>
<li>Unlimited file scans</li>
<li>Timed Lockout brute force login attack shield for login security</li>
<li>404 limiter for blocking vulnerability scans</li>
<li>IP lockout notifications and security reports</li>
</ul>
All the above is free and will enhance WordPress security for you. If you need extra security for your WordPress site, <a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=you_should_get_wpmudev_membership#trial" rel="nofollow ugc">you should get a WPMU DEV Membership</a>.
Our Membership gives you access to Defender Pro – which security features include automated scanning, scheduled malware scans for Core, themes, plugins and other files, audit logs, firewall protection, Safe Repair, Blocklist monitoring – alongside Snapshot Pro cloud backups, the Hub with automated plugin, theme and core updates and safe-upgrade scans, all our premium WordPress plugins, 24/7 WordPress support and if your sites already been hacked our team of security experts will clean it up at no additional cost.
<a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=and_you_can_find_out_more_here#trial" rel="nofollow ugc">It’s an incredible deal, and you can find out more here</a>.
<h3>About Us</h3>
WPMU DEV is a premium supplier of quality WordPress plugins and themes. For premium support with any WordPress-related issues you can join us here: 
<a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=wpmu_dev_link" rel="nofollow ugc">https://wpmudev.com/</a>
Don’t forget to stay up to date on everything WordPress from the Internet’s number one resource: 
<a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=wpmu_dev_blog_link" rel="nofollow ugc">WPMU DEV Blog</a>
Hey, one more thing… we hope you <a href="https://profiles.wordpress.org/WPMUDEV/" rel="nofollow ugc">enjoy our free offerings</a> as much as we’ve loved making them for you!

Defender Security – Malware Scanner, Login Security & Firewall

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

SecuPress with Simple SSL – Simple and Performant Security vs Defender Security – Malware Scanner, Login Security & Firewall