MoeSec Security – Comprehensive Malware Scanner & Security Suite vs WP Scanner – Performance and Security

MoeSec.com is a comprehensive Website Security Platform to protect your website against Hackers, Malware, Vulnerabilities and various threats. The Free MoeSec Security plugin is a powerful security plugin designed to safeguard your WordPress website against a wide range of security threats. With its comprehensive set of features, MoeSec offers Malware Scanning, Malware Detection, Integrity, Logging, Backups, Brute Force & Login Protection and much more. You can visit MoeSec.com to learn more. Key Features: File and Database Malware Scanner: Detect malicious code injections in your files or database and check for known malicious admin users with options to edit, delete, quarantine, whitelist or report a suspicious file for further investigation. External Security Scan: Remote Scanning to quickly Check your website for Malware infections, Hack signs, Redirects, Abnormal behaviors and more by scanning it using our external website malware scan engine MoeSec Website Scanner. WordPress Core Integrity Check: Ensure your WordPress installation hasn’t been tampered with. Scheduled Checks and Email notifications! You can whitelist any customized files or changes! Login Protection: Prevent brute force attacks and implement 2FA – Two-Factor authentication via Email or Auth Apps such as Google Authenticator. Firewall: Block requests & traffic from specific IPs, IP ranges, Geo-Blocking entire selected countries, user agents and bad bots. WordPress Hardening: Implement best practices to secure your WordPress installation. Custom Admin URL: You can change wp-admin to any custom admin URL for extra protection against automated attacks and bot requests! Bad Bot Blocking: Prevent malicious bots from accessing your site. You can block Bots, Crawlers & User Agents! Backup System: Generate Website Backups, Database Backups, Schedule Automated backups for your website! Scheduled Scans: Automate security checks at regular intervals. Email Notifications: Stay informed about security events and scan results. Much More! MoeSec is regularly updated to address the latest security threats and WordPress vulnerabilities, ensuring that your website remains protected against emerging risks. External services You can integrate your website with Recaptcha or hCaptcha to help mitigating spam visits or fake login attempts. Once this option is enabled, The plugin will communicate to their respected APIs using your own keys that you have created directly with the services and agreed to their terms and privacy policies. Also, This plugin is connecting and communicating to our MoeSec Website Scanner Engine to perform external website security scans for your website. We don’t send or store anything other than the website URL/Domain during scans and processing the requests or showing scan results. Also, This plugin is fetching our update servers on MoeSec everyday to look for new signature updates. Also, For Creating QR codes, The plugin is communicating with qrserver just for creating the needed QR codes. Additional Info For more information, please visit MoeSec. If you need professional assistance with malware removal or advanced security protection for your website, please visit our Professional Services . Privacy Policy MoeSec is committed to protecting your privacy. The plugin does not collect any personal data from your website visitors. It only processes data within your WordPress installation to perform security scans and implement protective measures. Credits MoeSec Plugin’s other home MoeSec Security Plugin

Monitor your site’s load time, performance and security using WP Scanner. Gain an insight into how quickly your site loads for visitors over time and receive suggestions on how to improve performance. Ensure your site is secure by monitoring file changes, permissions, server headers and other security concerns. Metrics View important metrics about your WordPress install, including: Load time WordPress version PHP version Plugin updates Content breakdown Performance The following performance rules are checked when scanning your site: Use PHP 7 or HHVM Enable object caching Minimize HTTP Requests Use a Content Delivery Network Avoid empty src or href Add an Expires or a Cache-Control Header Gzip Components Put StyleSheets at the Top Put Scripts at the Bottom Avoid CSS Expressions Make JavaScript and CSS External Reduce DNS Lookups Minify JavaScript and CSS Avoid Redirects Remove Duplicate Scripts Configure ETags Make AJAX Cacheable Use GET for AJAX Requests Reduce the Number of DOM Elements No 404s Reduce Cookie Size Use Cookie-Free Domains for Components Avoid Filters Do Not Scale Images in HTML Make favicon.ico Small and Cacheable Security The following security rules are checked when scanning your site: Verify WordPress Core Files Verify Directory and File Permissions Serve Site Over HTTPS Keep Plugins Updated Keep WordPress Updated Keep PHP Updated Disable Debug Display Disable File Editing Remove Accounts with “Admin” Username Change the Default Table Prefix Configure Public-Key-Pins Header Configure Content Security Policy Header Configure X-Frame-Options Header Configure X-Content-Type-Options Header Configure X-Xss-Protection Header Configure Strict-Transport-Security Header Disable Server Header Disable X-Powered-By Header