Modular DS vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Modular DS is an all-in-one WordPress site management platform built for freelancers and agencies to easily manage multiple sites, save time, and run a profitable maintenance business. From a single, intuitive dashboard, you can: Bulk manage and update plugins, themes, and WordPress core across multiple sites at once. Monitor uptime and performance with real-time alerts. Schedule automatic backups and restore them in one click from Modular DS. Know how likely a plugin update is to break your site before applying it with Update Copilot, our AI-powered update scoring system. Run quick or safe updates and automate them with smart rules based on version type, risk level, or detected vulnerabilities. Perform vulnerability and malware scans. Detect and fix broken links and images. Migrate, clone, and create staging environments. Optimize your WordPress databases right from Modular DS. Generate automated reports, including pre-maintenance reports, to show the value of your work to clients. Display a custom maintenance mode page to hide unfinished changes while you update or work on a site. Modular DS is the most complete alternative to ManageWP, MainWP, WP Umbrella, InfiniteWP, and WP Remote, bringing smart update automation, monitoring, backups, security, and reporting into a single platform. Usability and support are at the heart of everything we do. Our team brings over a decade of hands-on experience in WordPress site management and is always ready to help when you need it. Explore more features on our website or try it for free. Manage, monitor, and protect all your WordPress sites in one place Connect your WordPress sites to Modular DS, access them with one-click login, and manage updates, backups, security scans, uptime monitoring, and more in a single dashboard. Stay organized with tags and teams, and assign custom roles and permissions to collaborators. Bulk management and updates Install, update, activate, or delete plugins, themes, and WordPress versions across multiple websites at once (or one by one). The global updater also gives you a full picture of what’s happening across your sites: detected vulnerabilities, Update Copilot risk scores, warnings for abandoned plugins, and more, all from one place. Smarter, automated updates Choose how your updates run: as quick standard updates, as safe updates with before and after screenshots and instant rollbacks, or as smart automated updates that let you define when and under what conditions they should run. Pair it with Update Copilot, our AI-powered scoring system, to understand how risky a plugin update might be before applying it and make more informed decisions. You can also schedule one-time updates for a specific date and time, or simply hide updates you are not ready to apply. Whatever approach you prefer, Modular DS gives you more control and flexibility to safely keep your sites up to date. Backups and one-click restoration Schedule GDPR-compliant backups to safeguard your clients’ sites and data, or create one manually whenever you need. Choose between full or incremental backups and easily restore entire sites, files, or databases from Modular DS. Uptime monitoring Never get caught off guard by downtime. Get notified by email, WhatsApp, Slack, or Discord when any of your websites go down, before your clients even notice. Customize check frequency, response time, keyword detection, and alert settings to fit your workflow. Modular DS includes one of the most complete uptime monitor tools for WordPress. Security monitoring and management Modular DS includes vulnerability scans for plugins, themes, and WordPress core, with alerts up to 48 hours before issues are publicly disclosed. You also have malware scanning to check your sites’ files and database for malicious content, and admin user alerts to know whenever someone is added or removed as an administrator on any of your connected sites. On top of that, you get notified whenever something else requires your attention, from outdated PHP to expired SSL certificates. For teams that need more, our add-ons extend these capabilities. See the integrations section below for details. Broken link checker Run scheduled or on-demand scans to detect broken links and images across your sites. When broken internal links are found, create redirects to fix them without leaving Modular DS. Site migration, cloning, and staging Modular DS lets you migrate or clone any connected site in three ways: move it to another existing site in the platform, migrate it to a different server while keeping the same domain, or clone it to a new domain. You can also create staging environments on your own server to test changes before going live. Database optimization Clean up post revisions, spam comments, transients, orphaned tables, and more directly from Modular DS. No need for extra plugins. Keep your websites running smoothly while saving time and having a clear record of every optimization made. Client reports From winning new clients to keeping existing ones, Modular DS covers both ends of the reporting workflow. Before a client signs up, you can generate a pre-maintenance report to show everything their site needs: pending updates, detected vulnerabilities, site health issues, database optimizations, etc. Once they are on board, automatically generate and send regular maintenance reports that highlight the work you do behind each site. Add time logs, dates, and screenshots to showcase the full scope of your efforts, so clients understand the value of your service and keep paying for it. Both report types help you build trust, improve client retention, and turn your WordPress maintenance offering into recurring revenue. Integrations Modular DS integrates with Google Analytics, Search Console, WooCommerce, and PageSpeed, giving you an overview of your websites in one place and allowing you to include the data your clients care most about in your reports. To further strengthen your sites’ security, two add-ons extend what is included in every plan. Patch & Protect, powered by Patchstack, applies virtual patches and hardening rules to block known vulnerabilities and common attack methods as soon as they are detected, even before an official fix is available. And a malware add-on powered by Imunify Connect, which lets you run weekly and on-demand scans across your sites. Support that understands you Modular DS is the first site management platform with support in both English and Spanish. Whether you have a question or run into an issue, our team has over 10 years of WordPress experience and is here to help you.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!