justsnipy

SIWECOS is a free security scanning service trying to help website owners making there site more secure. In order to do so, SIWECOS utilizes a total of 5 scanners checking several different areas of your site.: 
– HTTP-Header Scanner: ensuring that your server tells the browser to enable additional security features 
– TLS Scanner: checks your HTTPS encryption for known issues, broken chains-of-trust, outdated certificates etc 
– Info Leak Scanner: checks if your sites exposes security relevant information (used WordPress version, plaintext emails) 
– DOMXSS Scanner: verifies that your site is protected against so called DOMXSS attacks 
– Initiative-S Scanner: utilizes the scanning technology of the free Initative-S.de service to check for malware in your websites source code
This plugin makes it much easier to use WordPress with SIWECOS by providing two main features: 
– Easier onboarding: the verification handshake with SIWECOS is automated by the plugin, no need to upload specially named files 
– Direct access to results: you\’ll get access to your current SIWECOS score right from the backend of your WordPress site
Please note: 
The actual scanning functionality is done by siwecos.de, this plugin retrieves result data from this service – the plugin itself is not able to work without the data fetched from the service. 
You can find the service’s general terms and conditions here: https://siwecos.de/en/terms-and-conditions 
SIWECOS’ privacy policy is found here: https://international.eco.de/legal-notice/privacy-policy/

SIWECOS

SIWECOS is a free security scanning service trying to help website owners making there site more secure. In order to do so, SIWECOS utilizes a total o …

johanee

Limit the number of login attempts possible both through normal login as well as using auth cookies.
By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.
Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.
Features
<ul>
<li>Limit the number of retry attempts when logging in (for each IP). Fully customizable</li>
<li>Limit the number of attempts to log in using auth cookies in same way</li>
<li>Informs user about remaining retries or lockout time on login page</li>
<li>Optional logging, optional email notification</li>
<li>Handles server behind reverse proxy</li>
<li>It is possible to whitelist IPs using a filter. But you probably shouldn’t. 🙂</li>
</ul>
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.

Limit Login Attempts

bad role

We had initial issues and tried again and it is working better.

Getting a lot better.


I absolutely hate bloated plugins, so I love this one. It's simple and works as expected. Guess it's wise to use a plugin such as this one, against brute force attacks.



Guido


Love this plugin

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

SIWECOS vs Limit Login Attempts