Pranshtech Solutions Private Limited

<p>TotalWeb offers a multi-layered approach to WordPress security, combining advanced protection mechanisms with an intuitive administrative interface. From real-time monitoring to proactive threat detection and prevention, TotalWeb empowers website administrators to maintain a secure online presence.</p>
<h3>Features</h3>
<h3>1. Login Security</h3>
<ul>
<li><strong>Login Attempt Tracking:</strong> Monitors and logs all login attempts, both successful and failed, including IP addresses and usernames.</li>
<li><strong>Two-Factor Authentication (2FA):</strong> Enhances login security using TOTP-based 2FA with WooCommerce support.</li>
<li><strong>IP and User Lockouts:</strong> Automatically locks IP addresses and users after a configurable number of failed login attempts.</li>
<li><strong>Login Log Management:</strong> View, filter, bulk delete, and export login attempt logs to CSV.</li>
</ul>
<h3>2. CAPTCHA Integration</h3>
<ul>
<li><strong>Multi-form CAPTCHA Protection:</strong> Adds CAPTCHA to:
<ul>
<li>Login Form  </li>
<li>Registration Form  </li>
<li>Lost Password Form  </li>
<li>Reset Password Form  </li>
<li>Comment Form  </li>
<li>WooCommerce Forms  </li>
</ul>
</li>
<li><strong>Supported CAPTCHA Types:</strong> reCAPTCHA v2, reCAPTCHA v3, hCaptcha, and Math CAPTCHA.</li>
<li><strong>Contact Form 7 Integration:</strong> Seamlessly injects CAPTCHA into CF7 forms.</li>
</ul>
<h3>3. File and Database Security</h3>
<ul>
<li><strong>Comprehensive File Scanning:</strong> Scans core files, plugins, and themes for modifications, new files, and deletions.</li>
<li><strong>Scheduled & On-Demand Scans:</strong> Run daily scheduled scans or manual scans anytime.</li>
<li><strong>Customizable Monitoring:</strong> Configure file types, exclusions, and email alerts.</li>
<li><strong>REST API Integration:</strong> Initiate scans and check status programmatically.</li>
<li><strong>MD5 Hash Verification:</strong> Detects unauthorized file changes.</li>
<li><strong>Database Backup & Restore:</strong> Perform manual or automated backups and restore previous versions.</li>
<li><strong>Database Prefix Change:</strong> Enhances security by changing the WP database prefix.</li>
<li><strong>SQL Injection Protection:</strong> Blocks suspicious queries and monitors DB activity.</li>
<li><strong>Query Monitoring:</strong> Detects and blocks suspicious SQL patterns.</li>
<li><strong>WordPress Hardening:</strong> Disable insecure WP features such as:
<ul>
<li>File Editor  </li>
<li>Unfiltered HTML (non-admins)  </li>
<li>XML-RPC  </li>
<li>Force SSL  </li>
<li>Hide WP version  </li>
<li>Block PHP execution in uploads  </li>
<li>Block dangerous file types  </li>
<li>Protect sensitive files (e.g., wp-config.php, .htaccess)</li>
</ul>
</li>
<li><strong>REST API Controls:</strong> Manage security settings and logs via API.</li>
</ul>
<h3>4. Malware Scanner</h3>
<ul>
<li><strong>Malicious Code Detection:</strong> Scans core, themes, plugins, and uploads for malware signatures.</li>
<li><strong>Manual & Scheduled Scans:</strong> Flexible scanning options.</li>
<li><strong>Issue Tracking:</strong> Detects modified, missing, unknown, and infected files.</li>
<li><strong>Email Reports:</strong> Sends alerts when malware is detected.</li>
</ul>
<h3>5. Firewall</h3>
<ul>
<li><strong>Web Application Firewall (WAF):</strong> Supports custom regex rules and ModSecurity CRS patterns.</li>
<li><strong>IP Blacklist/Whitelist:</strong> Block malicious IPs or allow trusted ones.</li>
<li><strong>Geo-Blocking:</strong> Restrict access by country.</li>
<li><strong>Rate Limiting & DDoS Protection:</strong> Limits requests per IP.</li>
<li><strong>Comment Spam IP Monitoring:</strong> Auto-blocks frequent spam IPs.</li>
<li><strong>Bad Bot Protection:</strong> Blocks known scrapers and bots.</li>
<li><strong>Smart 404 Blocking:</strong> Blocks IPs generating excessive 404 errors.</li>
<li><strong>General Firewall Options:</strong>
<ul>
<li>Disable RSS/ATOM feeds  </li>
<li>Block proxy comment submissions  </li>
<li>Advanced string filtering  </li>
<li>Enable 6G Firewall rules  </li>
<li>Block unauthorized REST requests  </li>
<li>Block blank user-agent or referrer POST requests  </li>
</ul>
</li>
</ul>
<h3>6. Redirects</h3>
<ul>
<li><strong>Custom 301 Redirects:</strong> Manage permanent redirect rules.</li>
<li><strong>Admin Interface:</strong> Add, edit, and delete redirects easily.</li>
<li><strong>URL Validation:</strong> Prevents duplicates and formatting issues.</li>
</ul>
<h3>7. Security Hardening</h3>
<ul>
<li><strong>HTTP Security Headers:</strong> Configure:
<ul>
<li>HSTS  </li>
<li>X-Frame-Options  </li>
<li>Content Security Policy (CSP)  </li>
<li>Referrer-Policy  </li>
</ul>
</li>
<li><strong>Role-Based Access Restrictions:</strong> Limit access to specific plugin features.</li>
<li><strong>One-Click Setup Wizard:</strong> Apply recommended hardening automatically.</li>
</ul>
<h3>8. Audit Logging</h3>
<ul>
<li><strong>Logs:</strong>
<ul>
<li>Logins (success/failure)</li>
<li>User profile changes</li>
<li>Role/capability changes</li>
<li>Plugin/theme activation/deactivation/updates</li>
<li>Theme switches</li>
</ul>
</li>
<li>Daily summaries.</li>
<li>Email alerts for important events.</li>
<li>Dashboard widget with recent events.</li>
<li>REST API access to logs.</li>
</ul>


TotalWeb – Security, Firewall & Malware Scanner

TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.

metadas

<p>Metadas Version Removal is a fast, minimal, production ready plugin that strips WordPress version information from all common output locations. This helps reduce fingerprinting, hardens your site against automated scanners, and keeps your HTML clean.</p>
<p>There is <strong>no admin interface</strong> and <strong>no configuration required</strong>. Activate the plugin and it immediately removes:</p>
<ul>
<li>WordPress generator meta tag</li>
<li>Version query strings from scripts and styles</li>
<li>REST API discovery links</li>
<li>oEmbed discovery links</li>
<li>RSS generator tags</li>
<li>Shortlink tags</li>
<li>RSD (Really Simple Discovery) link</li>
<li>Windows Live Writer manifest</li>
</ul>
<p>This plugin is intentionally small, efficient, and dependency free. It uses only core WordPress hooks and does not write to the database.</p>
<h3>Features</h3>
<ul>
<li>Removes all WordPress version output</li>
<li>Zero configuration activate and you’re done</li>
<li>Lightweight class based architecture</li>
<li>No database usage</li>
<li>No UI, no clutter</li>
<li>Safe for caching and CDN setups</li>
<li>Compatible with all themes and plugins</li>
</ul>


Metadas Version Removal

A lightweight, zero configuration plugin that removes all WordPress version output from your site for improved security and cleaner markup.

TotalWeb – Security, Firewall & Malware Scanner vs Metadas Version Removal