Fullworks Security Scanner vs Safe Sites

This plugin is your website’s security sentinel, keeping an eye on potential threats without making it sound too techy. It checks your WordPress core, themes, and plugins to find any weak spots. If it spots something amiss, you’ll get a friendly email alert to let you know there’s something worth looking at. This clever tool relies on a powerful database to get its info, helping it keep an eye out for common WordPress vulnerabilities. But it’s not just about vulnerabilities. The plugin also keeps an eye on abandoned plugins and themes, which can be a backdoor for trouble. With this plugin, you can easily keep your website secure and reduce the risk of security breaches. The report page gives you the power to decide what to do next. If it finds something, you can choose to ignore it, especially if you have an old theme you love but it’s no longer getting updates. You can also give a thumbs-up to plugins or themes you know are safe. Plus, the report gives you a quick peek at what’s changed with plugins that have updates available. This helps you decide if those updates are worth it. If you’re more of a command-line person, you can run a security audit with the command wp fullworks-scanner. It won’t send you an email, but it’ll tell you what it found right there in your console. In a nutshell, this handy WordPress security tool does the heavy lifting, making sure your site stays safe and sound. It’s like having a watchful eye on your website without all the jargo Key Features ✓ Comprehensive Scan: Checks your WordPress Core version, installed themes, and plugins for vulnerabilities. ✓ Vulnerability Database: References the WordPress Vulnerability Database API for up-to-date threat information. ✓ Abandoned Plugin/Theme Detection: Identifies and alerts you about abandoned plugins or themes that can pose security risks. ✓ Customizable Scanning Schedule: Adjust the scan frequency to match your needs. ✓ User-Friendly Report: Provides detailed scan reports with the option to accept or ignore warnings and errors. ✓ Change Log Highlights: Offers a quick review of plugin updates with extract from the change log. ✓ WP CLI Integration: Run scans from the command line with the wp fullworks-scanner command. Easy to Use Don’t miss out on the opportunity to fortify your WordPress website effortlessly and stay one step ahead of potential threats. Try it now and experience the peace of mind that comes with superior website security.   

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected. Key Features Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA. Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux). Visual File Permissions Map – See a color-coded structure of your site’s file security. Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal. Security Dashboard – View a complete overview of your site’s security health. Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts. Login & User Security – Monitor login attempts and manage user sessions. Site Hardening – Apply recommended security tweaks to your WordPress installation. Code Signing – Verify the integrity of your plugin files. Detailed Features General Security & Server Health: SSL Status – Check if SSL is active for secure connections. Site Health & Server Info – Displays PHP version, database version, and server details. Panic Mode – Quickly lock down your site in case of an emergency. Access & User Security: Two-Factor Authentication (2FA): TOTP Support – Use Google Authenticator, Authy, or any TOTP app. Configurable for All Roles – Require 2FA for specific user roles. Backup Codes – Generate backup codes for emergency access. Login Monitoring – Track failed login attempts and monitor user activity. Security Monitoring & Protection: File Permissions Management: Windows Servers – Show file read/write permissions. Linux Servers – Display numeric file permissions along with current and recommended settings. Fix Permissions – Select files and fix incorrect permissions directly. Visual File Permission Map – Interactive file structure with security indicators. Hardening – One-click security hardening for common WP vulnerabilities. Code Signing – Ensure plugin files haven’t been tampered with. Malware & Security Scanner: Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API. Security Header & DNS Scan – Check security headers and DNS settings. Alert System – Receive alerts for detected threats. WordPress Management & Security: Plugin & Theme Security: Vulnerability Scanner – Check for known security flaws. Inactive Plugin Alerts – Warns about inactive components that pose risks. Security Dashboard – A centralized panel for all security settings. External Services Used Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies: 1. VirusTotal API Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats. What data is sent & when? – When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. – No user private data is sent—only the target URLs/domains or hash values of files are transmitted. Terms of Service & Privacy Policy: – VirusTotal Terms of Service – VirusTotal Privacy Policy