DefendWP Firewall vs Safe Sites

Instant protection against disclosed vulnerabilities DefendWP.org is a WordPress plugin that protects your website from hackers exploiting vulnerable code on your website. Security research companies discover vulnerabilities and notify plugin developers to patch them. After some time, they disclose the vulnerability to the public, allowing you to update your plugins. However, this system has flaws. Once vulnerabilities are publicly disclosed, hackers rush to exploit the sites in which you haven’t yet applied the patch. A Better Approach: Immediate Protection for All Users To solve this, our plugin pushes firewall rules and patches as soon as vulnerabilities are disclosed, ensuring websites are protected without waiting for an official patch. This protection is silent and automatic, ensuring that you are not affected even if you don’t take any immediate action. Immediate Patches Upon Disclosure: When vulnerabilities are disclosed, our plugin pushes patches or firewall rules that prevent exploitation. Silent Protection: We operate in the background, allowing plugin developers to roll out patches at their own pace without compromising user security. Free and Accessible: Security should not be a privilege. Our plugin is free and accessible and ensures that all WordPress users are protected from newly disclosed vulnerabilities. Protecting Everyone, Not Just the Privileged Few Security should not be reserved for those who can afford premium services. The spirit of WordPress is inclusivity, and this should extend to security as well. When vulnerabilities are disclosed, they pose a risk to every website, regardless of its owner’s resources. Every WordPress user should have access to immediate protection. Security researchers play a vital role in identifying vulnerabilities, but the current system leaves too many users exposed. Our approach aims to create a safer WordPress ecosystem for all, by closing the gap between vulnerability disclosure and patching. This isn’t about taking credit—it’s about prioritizing the safety of small business owners, bloggers, and entrepreneurs who rely on WordPress. By silently closing the vulnerability gap, we aim for a future where WordPress security is accessible to everyone. Let’s build a safer WordPress ecosystem together—one that protects all users, not just the privileged few. For plugin authors: Report a Vulnerability Do you have an active vulnerability in your plugin you want to safeguard users from? Report it here Support Need help with your website’s security? Just send us an email at [email protected]. Note This plugin utilizes the Ipify.org to provide enhanced functionality. The API allows the plugin to retrieve the exact IP of the current user, which will be used to determine whether the user can access the WordPress site.Privacy policy Vulnerabilities, IPs, Plugins and Themes data will be sent between DefendWP.org and the WP site to instantly patch from vulnerabilities.

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected. Key Features Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA. Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux). Visual File Permissions Map – See a color-coded structure of your site’s file security. Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal. Security Dashboard – View a complete overview of your site’s security health. Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts. Login & User Security – Monitor login attempts and manage user sessions. Site Hardening – Apply recommended security tweaks to your WordPress installation. Code Signing – Verify the integrity of your plugin files. Detailed Features General Security & Server Health: SSL Status – Check if SSL is active for secure connections. Site Health & Server Info – Displays PHP version, database version, and server details. Panic Mode – Quickly lock down your site in case of an emergency. Access & User Security: Two-Factor Authentication (2FA): TOTP Support – Use Google Authenticator, Authy, or any TOTP app. Configurable for All Roles – Require 2FA for specific user roles. Backup Codes – Generate backup codes for emergency access. Login Monitoring – Track failed login attempts and monitor user activity. Security Monitoring & Protection: File Permissions Management: Windows Servers – Show file read/write permissions. Linux Servers – Display numeric file permissions along with current and recommended settings. Fix Permissions – Select files and fix incorrect permissions directly. Visual File Permission Map – Interactive file structure with security indicators. Hardening – One-click security hardening for common WP vulnerabilities. Code Signing – Ensure plugin files haven’t been tampered with. Malware & Security Scanner: Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API. Security Header & DNS Scan – Check security headers and DNS settings. Alert System – Receive alerts for detected threats. WordPress Management & Security: Plugin & Theme Security: Vulnerability Scanner – Check for known security flaws. Inactive Plugin Alerts – Warns about inactive components that pose risks. Security Dashboard – A centralized panel for all security settings. External Services Used Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies: 1. VirusTotal API Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats. What data is sent & when? – When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. – No user private data is sent—only the target URLs/domains or hash values of files are transmitted. Terms of Service & Privacy Policy: – VirusTotal Terms of Service – VirusTotal Privacy Policy