evilsocket

WP-Sentinel, is a plugin for the WordPress platform which will increase the security of your blog against attacks 
from crackers, lamers, black hats, h4x0rs, etc . 
The plugin will be loaded by wordpress before every other installed plugin and will execute some security checks upon incoming http requests and, when one of more 
requests turn on the system alarm, they will be blocked, the sentinel then will show a warning message to the user and send a notification email to the blog 
administrator with the whole attack details. 
Furthermore wp-sentinel will communicate with a centralized server to collect attackers data and build a ip address blacklist.
This plugin is able to block those kind of attacks :
<ul>
<li>Cross Site Scriptings</li>
<li>HTML Injections</li>
<li>Remote File Inclusions</li>
<li>Remote Command Executions</li>
<li>Local File Inclusions</li>
<li>SQL Injections </li>
<li>Integer & string overflows</li>
<li>Cross Site Request Forgery </li>
<li>Login bruteforcing</li>
<li>Flooding</li>
<li>… and so on 🙂</li>
</ul>
WP-Sentinel will NOT check requests from the user logged in as administrator, so if you want to check the installation you have to log out first.

WP-Sentinel

A wordpress security system plugin which will check every HTTP request against a given set of rules to filter out malicious requests.

jee@madtek.com

Effective website security requires a combination of tools and best practices to operate WordPress safely on today’s internet. MadTek’s Entrusans IDS security plugin adds tamper-resistance to your security tool set.
Sophisticated hackers scan WordPress websites 24X7 looking for vulnerabilities and they know how to delete or disable security plugins to avoid detection. Whether a breach is due to a Zero-Day attack or a known vulnerability, once hackers gain access to your website, they own it.
Tamper-resistance is essential to expose hackers who disable your website’s security plugins. Until you remove all malicious code and remediate all malicious file deletions or changes your website remains compromised.
MadTek developed the Entrusans IDS plugin to help WordPress website owners restore their websites quickly after a breach. Remediating a hacked website can be a complex and costly forensic job. The Entrusans system gives you the tamper-resistant file change history you need to quickly identify deleted, added and changed files. MadTek encrypts and stores your file-change data on remote servers denying hackers the ability to go undetected.
If you have a mission-critical website e.g. eCommerce, you need to know ASAP if a hacker penetrates your website.
<h3>Manual Install</h3>
<ol>
<li>Download the madtek-entrusans.zip file from the link in the order complete email or from the account download webpage at http://services.madtek.com. Login is required to reach the download page.</li>
<li>Create the directory madtek-entrusans in the wp-content/plugins directory.</li>
<li>Upload madtek-entrusans plugin files to the /wp-content/plugins/madtek-entrusans directory.</li>
<li>Go to the Plugins screen on the WordPress dashboard and find the newly uploaded Entrusans IDS plugin.</li>
<li>Click Activate under the Entrusans IDS plugin.</li>
<li>Following successful WordPress activation find the Entrusans IDS menu item on the left navigation menu of the WordPress dashboard.</li>
<li>Click the Entrusans IDS menu item and when presented with the activation form enter the license key and email address from the order confirmation email received following purchase.</li>
<li>Click the activate button.</li>
<li>A First Poll email will signal the site has successfully been scanned for the first time.</li>
</ol>
<h3>WordPress Dashboard Install</h3>
<ol>
<li>Download the madtek-entrusans.zip file from the link in the order complete email or from the account download webpage at http://services.madtek.com. Login is required to reach the download page.</li>
<li>Proceed through the standard WordPress new plugin install steps in the WordPress plugins screen.</li>
<li>Find the newly uploaded Entrusans IDS plugin in the list of plugins.</li>
<li>Activate the plugin via the Activate link under the Entrusans IDS plugin entry.</li>
<li>Following successful WordPress activation find the Entrusans IDS menu item on the left navigation menu of the WordPress dashboard.</li>
<li>Click the Entrusans IDS menu item and when presented with the activation form enter the license key and email address from the order confirmation email received following purchase.</li>
<li>When presented with the activation form enter the license key and email address from the 
the email received following purchase.</li>
<li>Click the activate button.</li>
<li>A First Poll email will signal the site has successfully been scanned for the first time.</li>
</ol>

MadTek Entrusans ™ IDS client

Effective website security requires a combination of tools and best practices to operate WordPress safely on today’s internet.

WP-Sentinel vs MadTek Entrusans ™ IDS client