MoeSec Security – Comprehensive Malware Scanner & Security Suite vs Safe Sites

MoeSec.com is a comprehensive Website Security Platform to protect your website against Hackers, Malware, Vulnerabilities and various threats. The Free MoeSec Security plugin is a powerful security plugin designed to safeguard your WordPress website against a wide range of security threats. With its comprehensive set of features, MoeSec offers Malware Scanning, Malware Detection, Integrity, Logging, Backups, Brute Force & Login Protection and much more. You can visit MoeSec.com to learn more. Key Features: File and Database Malware Scanner: Detect malicious code injections in your files or database and check for known malicious admin users with options to edit, delete, quarantine, whitelist or report a suspicious file for further investigation. External Security Scan: Remote Scanning to quickly Check your website for Malware infections, Hack signs, Redirects, Abnormal behaviors and more by scanning it using our external website malware scan engine MoeSec Website Scanner. WordPress Core Integrity Check: Ensure your WordPress installation hasn’t been tampered with. Scheduled Checks and Email notifications! You can whitelist any customized files or changes! Login Protection: Prevent brute force attacks and implement 2FA – Two-Factor authentication via Email or Auth Apps such as Google Authenticator. Firewall: Block requests & traffic from specific IPs, IP ranges, Geo-Blocking entire selected countries, user agents and bad bots. WordPress Hardening: Implement best practices to secure your WordPress installation. Custom Admin URL: You can change wp-admin to any custom admin URL for extra protection against automated attacks and bot requests! Bad Bot Blocking: Prevent malicious bots from accessing your site. You can block Bots, Crawlers & User Agents! Backup System: Generate Website Backups, Database Backups, Schedule Automated backups for your website! Scheduled Scans: Automate security checks at regular intervals. Email Notifications: Stay informed about security events and scan results. Much More! MoeSec is regularly updated to address the latest security threats and WordPress vulnerabilities, ensuring that your website remains protected against emerging risks. External services You can integrate your website with Recaptcha or hCaptcha to help mitigating spam visits or fake login attempts. Once this option is enabled, The plugin will communicate to their respected APIs using your own keys that you have created directly with the services and agreed to their terms and privacy policies. Also, This plugin is connecting and communicating to our MoeSec Website Scanner Engine to perform external website security scans for your website. We don’t send or store anything other than the website URL/Domain during scans and processing the requests or showing scan results. Also, This plugin is fetching our update servers on MoeSec everyday to look for new signature updates. Also, For Creating QR codes, The plugin is communicating with qrserver just for creating the needed QR codes. Additional Info For more information, please visit MoeSec. If you need professional assistance with malware removal or advanced security protection for your website, please visit our Professional Services . Privacy Policy MoeSec is committed to protecting your privacy. The plugin does not collect any personal data from your website visitors. It only processes data within your WordPress installation to perform security scans and implement protective measures. Credits MoeSec Plugin’s other home MoeSec Security Plugin

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected. Key Features Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA. Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux). Visual File Permissions Map – See a color-coded structure of your site’s file security. Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal. Security Dashboard – View a complete overview of your site’s security health. Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts. Login & User Security – Monitor login attempts and manage user sessions. Site Hardening – Apply recommended security tweaks to your WordPress installation. Code Signing – Verify the integrity of your plugin files. Detailed Features General Security & Server Health: SSL Status – Check if SSL is active for secure connections. Site Health & Server Info – Displays PHP version, database version, and server details. Panic Mode – Quickly lock down your site in case of an emergency. Access & User Security: Two-Factor Authentication (2FA): TOTP Support – Use Google Authenticator, Authy, or any TOTP app. Configurable for All Roles – Require 2FA for specific user roles. Backup Codes – Generate backup codes for emergency access. Login Monitoring – Track failed login attempts and monitor user activity. Security Monitoring & Protection: File Permissions Management: Windows Servers – Show file read/write permissions. Linux Servers – Display numeric file permissions along with current and recommended settings. Fix Permissions – Select files and fix incorrect permissions directly. Visual File Permission Map – Interactive file structure with security indicators. Hardening – One-click security hardening for common WP vulnerabilities. Code Signing – Ensure plugin files haven’t been tampered with. Malware & Security Scanner: Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API. Security Header & DNS Scan – Check security headers and DNS settings. Alert System – Receive alerts for detected threats. WordPress Management & Security: Plugin & Theme Security: Vulnerability Scanner – Check for known security flaws. Inactive Plugin Alerts – Warns about inactive components that pose risks. Security Dashboard – A centralized panel for all security settings. External Services Used Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies: 1. VirusTotal API Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats. What data is sent & when? – When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. – No user private data is sent—only the target URLs/domains or hash values of files are transmitted. Terms of Service & Privacy Policy: – VirusTotal Terms of Service – VirusTotal Privacy Policy