trilobita

Editor Remit gives administrators fine-grained control over which categories editors and authors can work in. Assign permitted categories to a user and they will only see and edit content within those categories — nothing else.
Who is it for?
Organisations and agencies managing WordPress sites with multiple contributors across distinct content areas. Common examples:
<ul>
<li>A university with departments each managing their own news and pages</li>
<li>A company where different teams own different sections of the site</li>
<li>An agency managing a client site with multiple editors who should not have access to each other’s content</li>
</ul>
How it works
Once a user has permitted categories assigned, Remit:
<ul>
<li>Filters the post and page list screens to show only content in their permitted categories</li>
<li>Restricts the category selector in the block editor to their permitted categories only</li>
<li>Blocks any attempt to save content outside their permitted categories — enforced server-side, not just in the UI</li>
<li>Allows access to uncategorised content (posts or pages with no categories assigned) so nothing is inadvertently locked away</li>
</ul>
Restrictions apply to users with the Editor or Author role only. Administrators are always unrestricted.
If a user has no categories assigned, no restriction is applied — they behave as normal.
Page support
By default WordPress does not enable categories for pages. Editor Remit includes an optional setting to add category support to pages and apply the same restrictions there too. Enable it under Settings > Editor Remit.
Block editor (Gutenberg) support
Remit works fully with the block editor. The category panel is filtered in real time to show only permitted categories. Saves are validated server-side via the REST API.
Lean and focused
Remit does one thing well. It does not touch custom post types, custom taxonomies, tags, or any other content type. There are no complex role matrices, capability editors, or access control lists to configure.
Current limitations
Remit restricts posts and optionally pages only. Custom post types, custom taxonomies, and multisite installations are not currently supported.

Trilobita Editor Remit

Restrict editors and authors to specific categories for posts, and optionally pages. Simple, focused, no bloat.

Acunetix

Acunetix Secure WordPress plugin is a free and comprehensive security tool that helps you secure your WordPress 
installation and suggests corrective measures for: securing file permissions, security of the database, version hiding, 
WordPress admin protection and lots more.
Acunetix Secure WordPress checks your WordPress website/blog for security vulnerabilities and suggests corrective actions such as:
<ol>
<li>Passwords</li>
<li>File permissions</li>
<li>Database security</li>
<li>Version hiding</li>
<li>WordPress admin protection/security</li>
<li>Removes WP Generator META tag from core code</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>WordPress version 3.0 and higher</li>
<li>PHP5 (tested with PHP Interpreter >= 5.2.9)</li>
</ul>
For more information on the Acunetix WP Security plug-in and other WordPress security news, visit the 
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join 
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback 
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.
<h4>Key security features:</h4>
<ul>
<li>Easy backup of WordPress database for disaster recovery</li>
<li>Removal of error-information on login-page</li>
<li>Addition of index.php to the wp-content, wp-content/plugins, wp-content/themes and wp-content/uploads directories to prevent directory listings</li>
<li>Removal of wp-version, except in admin-area</li>
<li>Removal of Really Simple Discovery meta tag</li>
<li>Removal of Windows Live Writer meta tag</li>
<li>Removal of core update information for non-admins</li>
<li>Removal of plugin-update information for non-admins</li>
<li>Removal of theme-update information for non-admins (only WP 2.8 and higher)</li>
<li>Hiding of wp-version in backend-dashboard for non-admins</li>
<li>Removal of version in URLs from scripts and stylesheets only on frontend</li>
<li>Reporting of security overview after WordPress blog is scanned</li>
<li>Reporting of file permissions following security checks</li>
<li>Live traffic tool to monitor your website activity in real time</li>
<li>Integrated tool to change the database prefix</li>
<li>Disabling of database error reporting (if enabled)</li>
<li>Disabling of PHP error reporting</li>
</ul>
For more information on the Acunetix Secure WordPress plug-in and other WordPress security news, visit the 
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join 
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback 
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.
<h3>WordPress Security</h3>
Security Scanner:
<ol>
<li>Scans WordPress installation for file/directory permissions vulnerabilites</li>
<li>Recommends corrective actions</li>
<li>Scans for general security vulnerabilities</li>
</ol>
For more information on the Acunetix Secure WordPress plug-in and other WordPress security news, visit the 
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join 
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback 
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.= License = 
Good news, this plugin is free for everyone! Since it’s released under the GPL, you can use it free of charge on your personal or commercial blog.
For more information on the Acunetix Secure WordPress plug-in and other WordPress security news, visit the 
<a href="http://www.acunetix.com/blog/" rel="nofollow ugc">Acunetix Blog</a> and join 
our <a href="http://www.facebook.com/Acunetix" rel="nofollow ugc">Facebook</a> page. Post any questions or feedback 
on the <a href="https://wordpress.org/support/plugin/secure-wordpress" rel="ugc">Acunetix Secure WordPress plug-in forum</a>.

Acunetix Secure WordPress

Scans your WordPress installation for security vulnerabilities.

Trilobita Editor Remit vs Acunetix Secure WordPress