Bearmor Security

Finally, a WordPress security plugin that doesn’t slow down your site.

Bearmor Security is built for small to medium businesses, freelancers, and agencies who need real protection without the bloat. No confusing dashboards, no technical jargon, no performance hit.

Why Bearmor?

🎯 Built for Non-Technical Users
You shouldn’t need a security degree to protect your website. Bearmor gives you clear, actionable insights in plain English.

⚡ Lightweight & Fast
Unlike bloated competitors, Bearmor won’t slow down your site. Clean code, efficient scans, zero impact on performance.

💰 Most Features FREE
While others lock everything behind paywalls, Bearmor gives you professional-grade security for free. Compare us to Wordfence, Sucuri, or iThemes Security – we’re more generous.

🛡️ Real Protection, Not Theater
We focus on what actually matters: detecting threats, blocking attacks, and keeping you informed. No fake “critical alerts” to scare you into upgrading.

🆓 FREE Features (Yes, Really Free)

Malware Scanner

• Deep file scanning for backdoors, shells, and malicious code
• Smart detection with pattern matching and heuristics
• Quarantine threats with one click
• Whitelist false positives to prevent future alerts
• Scans plugins, themes, uploads, and core files

File Integrity Monitoring

• Real-time tracking of all file changes
• See exactly what changed, when, and where
• Quarantine suspicious changes instantly
• Mark safe changes to keep your dashboard clean

Login Security

• Brute force protection with automatic IP blocking
• Login activity log – see every login attempt
• Anomaly detection – alerts for suspicious login patterns
• Geographic tracking – know where logins come from
• Two-Factor Authentication (2FA) via email – completely free

Security Hardening

• One-click hardening for common vulnerabilities
• Disable XML-RPC, file editing, directory browsing
• Hide WordPress version and login errors
• Enforce strong passwords
• All with simple on/off toggles

Activity Logging

• Track all admin actions
• See who changed what and when
• Filter by user, action type, or date
• Essential for multi-user sites

Security Dashboard

• At-a-glance overview of your security status
• Security score with clear letter grade (A-F)
• See threats, recent activity, and recommendations
• No clutter, just what matters

🚀 PRO Features (Optional Upgrade)

What’s FREE Forever

• Malware Scanner – Full file scanning with quarantine
• File Monitoring – Real-time change tracking
• Login Security – Brute force protection and blocking
• 2FA Authentication – TOTP support built-in
• Quarantine Threats – One-click isolation of malware
• Security Hardening – All hardening options included

Upgrade to PRO

• 🔥 Advanced Firewall – Block attacks before they reach WordPress
• 🤖 AI Security Analysis – ChatGPT explains threats in plain English
• 📊 Deep Vulnerability Scanner – Database scanning and comprehensive CVE checks
• ⏰ 24/7 Uptime Monitoring – External monitoring with instant email alerts
• 🌍 Geo-Blocking – Block entire countries and IP ranges
• 🎯 Priority Support – Email support with faster response times

Learn more about PRO →

🎯 Perfect For

• Small Business Owners who need protection without complexity
• Freelancers managing multiple client sites
• Agencies who want reliable security without performance issues
• Anyone tired of bloated, confusing security plugins

🔒 Privacy & External Services

Bearmor Security connects to our secure API server (bearmor.eu) for:
– License verification (PRO users only)
– Uptime monitoring (PRO users only)
– AI analysis (PRO users only)

Data sent to our servers:
– Site URL
– Admin email (for notifications)
– Security scan results (PRO AI analysis only)
– Site ID (anonymous identifier)

We DO NOT:
– Sell your data
– Track your visitors
– Store sensitive information
– Share data with third parties

For FREE users, only basic site registration data is sent (URL + email). No security data leaves your server.

Read our full privacy policy: https://bearmor.eu/privacy

📊 Why Choose Bearmor?

vs. Wordfence FREE

• We include 2FA (they lock it behind PRO)
• We include quarantine (they lock it behind PRO)
• Lighter performance impact
• Simpler, cleaner interface

vs. Sucuri FREE

• We include malware scanner (they lock it behind PRO)
• We include file monitoring (they lock it behind PRO)
• We include 2FA and quarantine
• More features in free version

vs. iThemes Security

• More generous free tier
• Better malware detection
• Cleaner dashboard
• Faster scans

🚀 Quick Start

1. Install and activate Bearmor Security
2. Run your first malware scan (Dashboard → Scan Now)
3. Enable recommended hardening options (Dashboard → Hardening)
4. Set up 2FA for your account (Settings → Two-Factor Auth)
5. You’re protected! 🎉

No configuration needed. Works out of the box.

💬 Support

• Documentation: https://bearmor.eu/docs
• Support Forum: https://wordpress.org/support/plugin/bearmor-security
• Email: [email protected] (PRO users get priority)

🌟 What Users Say

“Finally, a security plugin that doesn’t make me feel stupid. Everything just works.” – Sarah M., Freelancer

“Switched from Wordfence. Bearmor is faster and the free version has more features.” – Mike T., Agency Owner

“The AI analysis feature is a game-changer. It explains threats in plain English.” – David R., Small Business Owner

Privacy Policy

Bearmor Security respects your privacy. Here’s exactly what data we collect and why:

FREE Users:
– Site URL (to identify your installation)
– Admin email (for security notifications)
– Plugin version (for update checks)

PRO Users (in addition to above):
– Security scan results (for AI analysis)
– Uptime monitoring data (ping responses)
– Firewall block logs (for threat intelligence)

We NEVER:
– Sell your data to third parties
– Track your website visitors
– Store passwords or sensitive user data
– Share data without your explicit consent

Data Storage:
– All data encrypted in transit (HTTPS)
– Stored on secure servers in EU
– Retained for 90 days, then automatically deleted
– You can request data deletion anytime

Third-Party Services:
– OpenAI (ChatGPT) for AI analysis (PRO only)
– Our own servers for uptime monitoring (PRO only)

Full privacy policy: https://bearmor.eu/privacy
Contact: [email protected]

External Services

This plugin connects to external services in certain situations:

Bearmor API (bearmor.eu)
– When: Plugin activation, license verification, PRO features
– Data sent: Site URL, admin email, security scan results (PRO only)
– Purpose: License management, AI analysis, uptime monitoring
– Privacy: https://bearmor.eu/privacy
– Terms: https://bearmor.eu/terms

WordPress.org API (api.wordpress.org)
– When: Checking WordPress core file integrity
– Data sent: WordPress version number
– Purpose: Verify core files haven’t been tampered with
– Privacy: https://wordpress.org/about/privacy/
– Terms: https://wordpress.org/about/

WPVulnerability.net API (wpvulnerability.net)
– When: Scanning for known plugin/theme vulnerabilities
– Data sent: Plugin and theme slugs (names only, no site data)
– Purpose: Check for known security vulnerabilities
– Privacy: https://www.wpvulnerability.net/privacy-policy
– Terms: https://www.wpvulnerability.net/terms-of-service

IP-API.com (ip-api.com)
– When: Firewall blocks an IP or login from restricted country
– Data sent: IP address only
– Purpose: Determine country of origin for geo-blocking
– Privacy: https://ip-api.com/docs/legal
– Terms: Free tier for non-commercial use

OpenAI API (PRO only)
– When: AI security analysis is requested
– Data sent: Anonymized security scan results
– Purpose: Generate security recommendations
– Privacy: https://openai.com/privacy
– Note: No personally identifiable information is sent

All external connections use HTTPS encryption. FREE users connect for: initial registration, vulnerability checks, and geo-blocking. No security scan data leaves your server unless you upgrade to PRO.

Automatic Installation

1. Log in to your WordPress admin panel
2. Go to Plugins → Add New
3. Search for “Bearmor Security”
4. Click “Install Now” and then “Activate”

Manual Installation

1. Download the plugin ZIP file
2. Go to Plugins → Add New → Upload Plugin
3. Choose the ZIP file and click “Install Now”
4. Activate the plugin

After Activation

1. You’ll see the Bearmor Security menu in your admin sidebar
2. Run your first malware scan from the dashboard
3. Review and apply recommended hardening settings
4. Enable 2FA for your account (optional but recommended)

That’s it! Bearmor Security is now protecting your site.

1. 

   Security Dashboard - Clean, at-a-glance overview of your security status

2. 

   Malware Scanner - Detailed threat detection with one-click quarantine

3. 

   File Changes - Real-time monitoring of all file modifications

4. 

   Login Security - Track login attempts and block suspicious activity

5. 

   Hardening Options - Simple toggles for common security fixes

6. 

   Security Score - Letter grade showing your overall security posture

7. 

   AI Analysis (PRO) - ChatGPT-powered security recommendations

8. 
9. 

0.9.8

• Fixed: Quarantine file restore path handling
• Fixed: Nonce verification for whitelist/quarantine actions
• Improved: Admin bar now shows simple shield icon instead of scary threat warnings
• Added: Next scan time display on dashboard
• Added: Pagination for file changes (50 per page)
• Added: Auto-cleanup of old file changes (90+ days)
• Added: Exclusion of .git folders from file monitoring

0.9.7

• Fixed: Subscription cancellation now works correctly
• Improved: Cancel button UI shows cancelling status after successful cancellation
• Removed: Debug logging code

0.9.6 – 2025-12-06

• Added: Subscription cancellation button in Settings page
• Added: Professional welcome email for new PRO subscribers
• Improved: Settings page UI with action buttons (Docs, Support, Upgrade/Cancel)
• Fixed: Button icon alignment with flexbox
• Fixed: Dynamic base URL for dev/prod environments

0.9.5 – 2025-12-06

• Fixed: Author URI now points to bearmor.eu instead of bearz.ee

0.9.4 – 2025-12-06

• Improved: Readme formatting for better WordPress.org display
• Fixed: Tested up to WordPress 6.7
• Fixed: Contributor username corrected

0.9.3 – 2025-11-29

• Improved: Uptime history modal redesigned with 7-day daily + 24-hour hourly breakdown
• Improved: Keep only last 50 downtime events to prevent database bloat
• Improved: Ping data cleanup extended from 7 to 30 days
• Improved: Auto-close open downtime events when site recovers
• Fixed: Removed confusing “Ongoing” status from downtime events
• Fixed: Replaced emoji icons with clean monochrome dashicons

0.9.2 – 2025-11-28

• Added: Hybrid uptime widget with 6 daily bars + 24 hourly bars
• Added: Hover tooltips showing exact uptime percentage for each bar
• Added: Blocked IPs table on Login Security page with unblock action
• Improved: All widget icons now use professional dashicons
• Improved: Country flags with tooltips in login activity tables

0.9.0 – 2025-11-27

• Added: Country flags with tooltips in login tables for better geo-tracking
• Fixed: Critical error with country flag helper function
• Improved: IP column widths and table layouts

0.8.9 – 2025-11-26

• Fixed: Pagination limited to max 10 pages for better UX
• Improved: Modernized File Changes page layout
• Improved: Firewall widget display and table designs

0.8.5 – 2025-11-25

• Improved: Dashboard layout modernization with better spacing
• Improved: PRO features styling and button consistency
• Improved: Table designs across all pages

0.8.4 – 2025-11-24

• Fixed: WordPress.org review feedback – security and code standards
• Improved: Escaping and sanitization throughout plugin

0.8.2 – 2025-11-25

• Fixed: Manual “Refresh License” now includes admin_email for proper registration
• Improved: Site registration reliability when Home server is reset

0.8.1 – 2025-11-18

• Improved: Unified button styling across entire plugin
• Improved: All buttons now use dashicons instead of emojis
• Added: Auto-sync uptime data on dashboard load (1-hour cache)
• Fixed: Uptime monitoring “0 pings = 100%” bug

0.8.0 – 2025-11-14

• Removed: GitHub update checker (WordPress.org handles updates)
• Fixed: Security improvements – wp_safe_redirect(), proper escaping
• Fixed: Timezone-safe database operations with gmdate()
• Improved: WordPress.org submission ready