shadowscan

ShadowScan Security Link pairs your site to the ShadowScan portal and keeps it in sync with heartbeat status, Guard Layer signals, login abuse detection, and security commands.
ShadowScan does not install, activate, or configure third-party security tools. If another security plugin is present, the connector only records its presence as metadata.
<h3>External services</h3>
This plugin connects to external services to sync status, process security workflows, and support optional diagnostics.
<ul>
<li>Service: ShadowScan API (hosted at Supabase Edge Functions)</li>
<li>URL: https://foemwjtosslaiynduiyt.supabase.co/functions/v1/</li>
<li>Used for: site pairing, heartbeat sync, command polling, command-result upload, subscription/policy sync, and support contact submissions.</li>
<li>Data sent and when: site URL, WordPress version, PHP version, connector version, Guard Layer/control status, heartbeat timestamps, and command execution metadata whenever the connector syncs with ShadowScan; contact form fields only when an admin submits support contact.</li>
<li>Terms: https://shadowscan.com.au/terms</li>
<li>
Privacy: https://shadowscan.com.au/privacy
</li>
<li>
Service: Have I Been Pwned Passwords API
</li>
<li>URL: https://api.pwnedpasswords.com</li>
<li>Used for: optional breached-password checks in password policy enforcement.</li>
<li>Data sent and when: k-anonymity password hash prefix (first 5 SHA-1 characters, no raw passwords) only when a password is checked by the policy flow.</li>
<li>Terms: https://haveibeenpwned.com/TermsOfUse</li>
<li>
Privacy: https://haveibeenpwned.com/Privacy
</li>
<li>
Service: Sentry
</li>
<li>URL: https://sentry.io</li>
<li>Used for: optional error and fatal-event telemetry to assist troubleshooting.</li>
<li>Data sent and when: error event metadata (such as exception messages, stack traces, and runtime context) only after an admin explicitly enables Sentry telemetry in plugin settings and a Sentry DSN is configured; the optional MU diagnostics helper can send early-startup fatal errors only while both Sentry telemetry and remote diagnostics are enabled.</li>
<li>Terms: https://sentry.io/terms/</li>
<li>Privacy: https://sentry.io/privacy/</li>
</ul>
<h3>Third-Party Libraries</h3>
This plugin bundles: 
* pragmarx/google2fa (MIT License) 
* bacon/bacon-qr-code (BSD-2-Clause; Copyright (c) 2017-present, Ben Scholzen “DASPRiD”)
<h3>Hooks</h3>
shadowscan_log 
Fires when the plugin emits an internal log message. You can hook this in a must‑use plugin or theme if you want to capture logs.

ShadowScan Security Link

Connects your WordPress site to the ShadowScan portal for heartbeats, guard signals, and security commands.

WebTotem

WebTotem: Enhance Your WordPress Website Security
WebTotem the Ultimate WordPress Security Plugin for Comprehensive Protection 
In today’s digital landscape, safeguarding your WordPress website against a myriad of threats is paramount. WebTotem emerges as a formidable security solution, offering a suite of powerful features designed to protect your website from the ground up. With antivirus scans, firewall protection, SSL certificate monitoring, and port analysis, WebTotem ensures your web space is meticulously guarded. Pushing the envelope further, it incorporates CVE vulnerability scanning to preemptively identify and mitigate potential risks, fortifying your website’s defense mechanism. 
WebTotem transforms your website into an impenetrable fortress by integrating additional layers of security such as activity logs, two-factor authentication (2FA), brute force attack prevention, and CAPTCHA functionalities. This not only guarantees uninterrupted operation but also establishes a reliable security framework for your website.
<h3>Core Features:</h3>
<ul>
<li>Antivirus Protection: Conducts thorough scans of your files for malicious software, hidden shells, and dubious modifications, marking the first step towards a secure website. It’s an intuitive solution for maintaining your site’s integrity.</li>
<li>Firewall Defense: Offers real-time safeguarding against SQL injections, XSS, and DOS attacks, ensuring your data remains secure from unwelcome intrusions.</li>
<li>SSL Module: Administers continuous monitoring and management of your site’s SSL certificates, protecting data transmission round the clock.</li>
<li>Port Scanner: Employs meticulous analysis to identify open ports, blocking unauthorized access and neutralizing potential threats.</li>
<li>Open Path Scanner: Proactively searches and reviews accessible paths to files and directories, closing off avenues for attacks.</li>
<li>Reputation Module: Vigilantly monitors and alerts you about any blacklisting issues, safeguarding your site’s online reputation and visibility.</li>
<li>Accessibility Module: Keeps a close watch on site availability and page response times, ensuring optimal performance and a seamless user experience.</li>
<li>Technology Scanner: Accurately identifies your site’s technology stack and its versions, aiding in keeping your systems up-to-date.</li>
</ul>
<h3>Highlight Features:</h3>
<ul>
<li>Vulnerability Scanner: A cornerstone feature that scans for known vulnerabilities within the Common Vulnerabilities and Exposures (CVE) database, enabling swift remediation to boost your site’s security.</li>
<li>Server Resource Module: Provides crucial insights into RAM and CPU usage, along with disk space analytics, facilitating efficient resource utilization for enhanced site performance.</li>
<li>Activity Log: An essential tool for monitoring site changes and activities, offering a comprehensive event timeline for enhanced security oversight and swift incident response.</li>
</ul>
<h3>Enhanced Security Measures:</h3>
<ul>
<li>Two-Factor Authentication (2FA): Elevates security by requiring a second form of verification, seamlessly integrated within your CMS to protect administrative access.</li>
<li>CAPTCHA Integration: A versatile tool against spam bots and automated attacks, offering customizable CAPTCHA deployment to safeguard your forms from unwarranted submissions.</li>
<li>Brute-Force Protection: Actively combats password guessing attempts, employing proactive measures to prevent unauthorized access to your accounts.</li>
<li>Security Level Assessment (Scoring): Offers a detailed security evaluation based on an innovative methodology, pinpointing improvement areas with strategic recommendations to fortify your website’s security stance.</li>
<li>Vulnerability Remediation Advice: Goes beyond detection by providing actionable, detailed guidance for addressing vulnerabilities, enhancing your website’s resilience against threats.</li>
</ul>
WebTotem stands as a comprehensive security plugin, expertly crafted to enhance your WordPress site’s defenses. By adopting WebTotem, you not only protect your site from current threats but also strengthen its overall security architecture, ensuring a safe and robust online presence.

WebTotem Security

WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.

ShadowScan Security Link vs WebTotem Security