pieceagency

<p>Sovaryx Login Security strengthens your WordPress site’s login security while staying lightweight and easy to operate.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Dashboard</strong> – Security score display with quick overview of your site’s security status</li>
<li><strong>Security Headers Scan</strong> – HTTP header validation and security recommendations</li>
<li><strong>REST API Scan</strong> – Comprehensive API endpoint security verification (18 checks)</li>
<li><strong>Login Security</strong> – Multi-layer login protection including brute force protection (enabled by default), IP restrictions with trusted proxy support, XML-RPC disable option, reCAPTCHA, Email OTP authentication with IP-based rate limiting, and threat intelligence integration</li>
<li><strong>API Protection</strong> – REST API rate limiting and user enumeration prevention</li>
</ul>
<h4>Highlights</h4>
<ul>
<li>Lightweight design – Minimal impact on site performance</li>
<li>Multi-language support – English and Japanese</li>
<li>Plugin conflict detection – Automatic detection and warnings</li>
</ul>
<h4>System Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>MySQL 5.7+ / MariaDB 10.2+</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to external services for certain features. Below is a description of each service, what data is sent, and when.</p>
<h4>Google reCAPTCHA (Optional)</h4>
<p>When you enable reCAPTCHA protection for the login page, this plugin loads Google reCAPTCHA scripts and sends verification requests.</p>
<ul>
<li><strong>Service Provider:</strong> Google LLC</li>
<li><strong>What it is used for:</strong> Protecting the login page from automated bots and brute force attacks</li>
<li><strong>Data sent:</strong> User IP address, browser information, and interaction data for bot detection</li>
<li><strong>When data is sent:</strong> When the login page is loaded and when a login form is submitted</li>
<li><strong>Terms of Service:</strong> https://policies.google.com/terms</li>
<li><strong>Privacy Policy:</strong> https://policies.google.com/privacy</li>
</ul>
<h4>Threat Intelligence Services (Optional)</h4>
<p>When threat intelligence features are enabled in Login Security settings, the plugin queries external threat databases to check visitor IP addresses for malicious activity. This helps protect your login page from known attackers.</p>
<p><strong>Spamhaus</strong><br />
* What it is used for: Checking if an IP is listed in spam/threat databases<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Website: https://www.spamhaus.org<br />
* Terms: https://www.spamhaus.org/legal/</p>
<p><strong>AbuseIPDB</strong><br />
* What it is used for: Checking IP abuse reports<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Terms of Service: https://www.abuseipdb.com/legal<br />
* Privacy Policy: https://www.abuseipdb.com/privacy</p>
<p><strong>Project Honey Pot</strong><br />
* What it is used for: Identifying harvesters, spammers, and malicious bots<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Website: https://www.projecthoneypot.org<br />
* Terms: https://www.projecthoneypot.org/terms_of_service_use.php</p>
<p><strong>Cloudflare Radar</strong><br />
* What it is used for: Checking if an IP address is associated with malware, botnets, phishing, or spam<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Terms of Service: https://www.cloudflare.com/terms/<br />
* Privacy Policy: https://www.cloudflare.com/privacypolicy/</p>
<p><strong>IP2Location / IP2Proxy</strong><br />
* What it is used for: Detecting proxy, VPN, and Tor connections from visitor IP addresses<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Terms of Service: https://www.ip2location.com/terms<br />
* Privacy Policy: https://www.ip2location.com/privacy-policy</p>


Sovaryx Login Security

A free WordPress security plugin focused on login protection, security diagnostics, and API protection.

WebDoktoru

<p>WebDoktoru Security provides comprehensive security protection for your WordPress website with an easy-to-use interface. This plugin offers multiple security features that can be activated or deactivated with a single click, making it perfect for both beginners and advanced users.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Disable XML-RPC</strong> – Prevents XML-RPC attacks and increases security</li>
<li><strong>Hide WordPress Version</strong> – Hides WordPress version information from potential attackers</li>
<li><strong>Disable File Editing</strong> – Disables file editing from admin panel for enhanced security</li>
<li><strong>Remove WordPress Generator</strong> – Removes WordPress information from HTML source code</li>
<li><strong>Disable User Enumeration</strong> – Prevents user ID discovery attempts</li>
<li><strong>Block Bad Bots</strong> – Blocks known malicious bots and crawlers</li>
<li><strong>Disable Directory Browsing</strong> – Prevents directory listing on your server</li>
<li><strong>Limit Login Attempts</strong> – Protects against brute force attacks</li>
<li><strong>Disable Author Scans</strong> – Hides author pages from potential attackers</li>
<li><strong>Secure HTTP Headers</strong> – Adds important security headers to your site</li>
</ul>
<h4>Multi-Language Support</h4>
<p>This plugin supports multiple languages:</p>
<ul>
<li>English (Default)</li>
<li>Turkish (Türkçe)</li>
</ul>
<p>To add support for a new language:</p>
<ol>
<li>Copy the <code>languages/webdoktoru-security.pot</code> file</li>
<li>Rename it to <code>webdoktoru-security-{locale}.po</code></li>
<li>Translate the strings in the PO file</li>
<li>Compile it to MO format using: <code>msgfmt webdoktoru-security-{locale}.po -o webdoktoru-security-{locale}.mo</code></li>
<li>Place both files in the <code>languages/</code> directory</li>
</ol>
<h4>Security Status Monitoring</h4>
<p>The plugin evaluates your security status based on active security measures:</p>
<ul>
<li><strong>Excellent (80%+):</strong> Green status</li>
<li><strong>Good (60%+):</strong> Yellow status</li>
<li><strong>Weak (<60%):</strong> Red status</li>
</ul>
<p><h4>Technical Requirements</h4>
</p>
<ul>
<li>PHP Version: 7.0 or higher</li>
<li>WordPress Version: 5.0 or higher</li>
<li>Modern web browser for admin interface</li>
</ul>
<h3>Version History</h3>
<h4>1.0.2</h4>
<p>– Fixed inline JavaScript to use wp_add_inline_script() for WordPress standards compliance<br />
– Updated all function names with unique prefixes to prevent conflicts<br />
– Enhanced transient key naming with webdoktoru_security_ prefix<br />
– Improved AJAX action names for better uniqueness<br />
– WordPress.org repository compliance improvements</p>
<h4>1.0.1</h4>
<p>– Added multi-language support<br />
– English as default language<br />
– Turkish translation included<br />
– Improved code structure and caching</p>
<h4>1.0.0</h4>
<p>– Initial release<br />
– 10 basic security features<br />
– Modern admin interface<br />
– AJAX-based setting changes</p>


WebDoktoru Security

Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.

Sovaryx Login Security vs WebDoktoru Security