Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs Vendor Onboarding W9-1099 Chaser by Mypowerly

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!

Note: This plugin is currently in beta stage. Features and functionality may evolve as we continue development. Stop chasing vendors for W-9s. Automate it inside WordPress. If your WordPress site pays affiliates, contractors, or vendors — you are legally required to collect a signed W-9 before issuing a 1099 at year-end. Most store owners handle this over email, in spreadsheets, or not at all — until the IRS deadline hits. ⚠️ One missing W-9 can trigger an IRS penalty of $310 per form. Intentional disregard carries penalties with no maximum cap. W-9 1099 Chaser is the only WordPress-native plugin that automates the full compliance workflow — from the first W-9 request to the final IRS e-file — without a single data export or CSV upload. This plugin is currently in beta. We’re actively improving features and welcome your feedback as we enhance the platform. The Problem This Solves Without this plugin, collecting a W-9 means emailing a blank IRS PDF, waiting for your contractor to print it, fill it by hand, sign it, scan it, and email it back — if they ever do. Not every contractor has a printer. Not every gig worker has PDF software. And almost none of them want to figure out how to digitally sign a PDF on their phone at midnight. W-9 1099 Chaser lets your affiliates and contractors self-serve: visit your site, fill out the web form, sign it digitally, and download a completed W-9 PDF — in minutes, on any device, with no software to install. Your onboarding starts immediately instead of stalling in someone’s inbox. Free: Standalone W-9 Tool (No Account Needed) Use your WordPress site as an instant W-9 station. No account required to get started. Three Access Modes — Deploy the W-9 Form Your Way Public Mode — The W-9 webform is freely available to any visitor. They can fill it out, sign it, and download their completed W-9 PDF at any time. Protected Mode — Share access selectively via a PIN or secret key. Ideal if you only work with approved contractors or affiliates and want to control who can submit a form. Private Mode — For internal use only. Only the store owner can access the form — perfect for generating your own W-9s without making anything public. Free Tool Features Electronic Signature — Built-in e-signature included free; no third-party tool needed Two PDF Output Options Official IRS W-9 PDF — auto-filled from your web form entries Print-to-PDF version — a reliable backup if needed (consult your legal counsel on which format suits your use case) Gutenberg Block — Embed the form natively in the block editor; no shortcode required Shortcode Support — Works in any page builder or classic editor via [w91099ch_w9_form] Responsive Design — Mobile-friendly; gig workers can complete and sign their W-9 from any phone with no printer or PDF software needed Frontend & Backend Display — Responsive form accessible from both the admin panel and public-facing pages Connected: Full Vendor Compliance Automation (Free to Start) For WooCommerce stores, affiliate programs, and marketplaces that need to collect W-9s at scale — connect to MyPowerly and automate everything. Automatic Detection Auto-detects new affiliates and vendors the moment they join your store W-9 request sent automatically — no manual work required Multi-Channel Vendor Chasing Send W-9 requests via Email, SMS, WhatsApp, or VoIP Smart follow-up reminders chase non-responsive vendors automatically You never have to write another “please send your W-9” email Compliance Enforcement Real-time status dashboard — see who has signed, who is pending, who is overdue Flag vendors who hit the $600 IRS reporting threshold without a W-9 on file Freeze payments to non-compliant vendors before you pay them in error Year-End Filing TIN Matching validates every tax ID before filing — eliminates the most common cause of IRS B-Notices and penalties Optional 1099 e-filing at industry-low per-form pricing — no re-entry, no accountant required Google Sheets sync — export your full vendor and W-9 status to your own Google Drive Your Brand, Your Portal White-label vendor portal with your logo, colors, and domain Invite your accountant or bookkeeper to manage filings under their own login Who This Is For WooCommerce marketplace owners paying sellers or affiliates WordPress sites using AffiliateWP, Dokan, WC Vendors, SliceWP, or YITH Bookkeepers and CPAs managing compliance for multiple client sites Any WordPress site paying independent contractors over $600/year Works With Direct Integration (auto-detection + sync): AffiliateWP SliceWP YITH WooCommerce Affiliates WP Affiliate Manager WC Vendors Dokan WCFM Marketplace Heuristic Detection: Affiliate for WooCommerce Ultimate Affiliate Pro Easy Affiliate Tapfiliate WP Affiliate Platform Also connects with: Google Sheets Google Drive Outlook Gmail Free vs. Connected Feature | Free (Standalone) | Connected (MyPowerly) ------------------------------------------- | ----------------- | -------------------- W-9 PDF fill & download | Yes | Yes Electronic signature | Yes | Yes Three access modes (Public / Protected / Private) | Yes | Yes Gutenberg block support | Yes | Yes Auto-detect new vendors/affiliates | No | Yes Bulk W-9 request sending | No | Yes Email / SMS / WhatsApp / VoIP delivery | No | Yes Real-time compliance dashboard | No | Yes Payment freeze for non-compliant vendors | No | Yes TIN Matching | No | Yes Audit trail & legally binding eSignature | No | Yes White-label vendor portal | No | Yes 1099 e-filing | No | Add-on Connected features require a free MyPowerly account. Advanced features are usage-based — no monthly subscription fee. Why Not Just Hire an Accountant? An accountant charges ~$500 once a year and does nothing in between. They don’t chase your vendors in August when they go quiet. They don’t freeze a payment when a vendor crosses the $600 threshold without a W-9 on file. They don’t send a WhatsApp reminder on a Tuesday morning. W-9 1099 Chaser does all of that automatically, year-round, without you touching anything. For accounting professionals who want to stay involved — they can be invited into the platform and manage multiple client sites under their own white-label portal. We don’t replace accountants. We make them look good. Security & Data Handling Sensitive tax data (TIN / SSN / FEIN) is never transmitted through the WordPress plugin Data goes directly to MyPowerly’s secured backend with AES-256 encryption at rest and TLS in transit No background data sync — all transmissions are administrator-initiated No ads. No hidden tracking. Full subprocessor transparency. ⚠️ This plugin does not file tax forms or provide tax advice. All 1099 filing is handled by the connected MyPowerly service. Privacy Policy: https://1099automation.com/w9-1099-chaser/privacy-policy/ Terms: https://1099automation.com/w9-1099-chaser/terms/ One-Line Positioning Statement “The only 1099 and W-9 compliance platform built inside WordPress — from vendor onboarding to IRS e-filing, with zero data exports.” “Automate vendor onboarding – W-9 compliance & 1099 Electronic Filing (in minutes)” Connect with our platform for advanced vendor onboarding features including: * Automated W-9 form collection * Contractor compliance tracking * 1099 electronic filing preparation * Vendor management workflows Optional: Connect with MyPowerly.com for advanced workflows For advanced workflows, an administrator can connect the site to an external API provider: Official website: https://1099automation.com/ Primary service used by this plugin: https://www.mypowerly.com/ Partner platform: https://1099automation.com/become-a-partner Support email: [email protected] MyPowerly.com provides the backend API, automations and workflow services used by the connected features in this plugin. When optionally connected for advanced features, WordPress is used only as an interface/bridge for user-initiated actions such as connection, manual sync operations, and widget generation. What this plugin does Includes a W-9 PDF fill/download tool (client-side) for convenience and easy sharing. For advance automation and features: Connects your WordPress site to an external MyPowerly account using the new External Connect API. Automatically configures secure webhook endpoints for real-time data synchronization. Lets administrators run manual, user-initiated sync actions (for example: site profile, team members, and payees / affiliates / vendors / independent contractors records). Provides comprehensive webhook event tracking for all sync operations. Optionally helps generate and embed a W9 data collection widget provided by the external service. Includes built-in webhook testing and verification tools for easy troubleshooting. What this stand alone plugin does not do It does not file tax forms. It does not submit 1099s. It does not file 1099 forms. It does not provide tax advice. Sensitive data handling (TIN/SSN/FEIN) W9 – 1099 Chaser works in stand alone mode. Therefore it does NOT transmit taxpayer identification numbers (TIN), including SSN/FEIN, to MyPowerly or to any connected MyPowerly platform. The plugin explicitly excludes common TIN-related fields from API transmissions. External Service Disclosure This plugin connects to external services for advanced automations and features only. For such advanced needs, this plugin will not function fully without an account with at least the primary MyPowerly service listed below. The plugin provides limited standalone functionality (such as W-9 PDF generation) without connecting to the external MyPowerly service. Encryption is used to protect API tokens and administrator-initiated metadata during secure communication with the external MyPowerly service. Taxpayer identification numbers (TIN/SSN/FEIN) are not transmitted by this plugin and therefore are not encrypted. For more information: Terms & Conditions: https://1099automation.com/w9-1099-chaser/terms/ Privacy Policy: https://1099automation.com/w9-1099-chaser/privacy-policy/ MyPowerly Website: https://mypowerly.com API Domain: https://mypowerly.com Connects your WordPress site to your MyPowerly account Enables user-initiated sync for automations, workflows, W-9 management, affiliate/vendor tracking, and widget generation Data is transmitted only after an administrator performs an explicit action (e.g., Connect, Sync, Generate Widget Code) Data that may be transmitted (based on selected action): Site information (site URL, site name, admin email) during connection Team/user details (email, role) when using team sync Affiliate/vendor/contractor records from supported plugins or WordPress users (name, email, status, IDs, payout/earnings summary signals) Widget configuration or embed code W-9 form fields entered by an administrator (SSN/FEIN/TIN are not transmitted) Stored in WordPress: Connection tokens/credentials Limited connector settings (status, timestamps, widget settings) Completed W-9 PDFs are not stored in WordPress Stored by MyPowerly: Synced data is stored securely in your MyPowerly account Privacy Policy: https://www.mypowerly.com/privacy-policy MyPowerly Features • Create and send W-9 requests individually or in bulk via CSV • Sync contacts from Google, Outlook, Yahoo, Hotmail, Google Sheets • Send affiliate/vendor data from your store • Auto-detect new affiliates and trigger W-9 requests • Direct integration: AffiliateWP, SliceWP, YITH WooCommerce Affiliates, WP Affiliate Manager, WC Vendors, Dokan, WCFM Marketplace • Heuristic detection: Affiliate for WooCommerce, Ultimate Affiliate Pro, Tapfiliate, Easy Affiliate, WP Affiliate Platform, itthinx Affiliates • Pre-filled W-9 forms using imported data • Custom logo, brand colors, and domain • Mobile-friendly, W-9 compliant forms • White-label portal for vendors and affiliates • Real-time request status tracking • Secure W-9 PDF generation and encrypted storage • Organized, searchable document library • Optional W-9 data collection widget • Optional live chat widget powered by Clicflo.com • Optional embedded forms (Contact, Newsletter, Pay Me, Client Intake, Power of Attorney, Contracts, Engagement Letters) • Administrator-enabled and configurable • Widget content loads from MyPowerly.com or Clicflo.com 🔹 MyPowerly Paid Features (Usage-Based – No Monthly Fee) • Automated W-9 requests via eCommerce and affiliate integrations • Multi-channel delivery: Email, SMS, WhatsApp, VoIP • Smart reminders and notifications • Secure eSignature and Multi-Factor Authentication (MFA) • Legally binding, timestamped audit trails • Compliance dashboard with signed/pending status tracking • W-9-ready PDFs on demand • TIN Matching to reduce errors and avoid penalties • Optional 1099 E-Filing add-on with industry-low pricing • File electronically with no data re-entry • Discount codes available for special pricing Privacy Privacy & Consent Summary (What / When / Where / Why) What data is sent: • Site/profile details (site URL, site name, admin email), team/user details (user email and role), payees/affiliates/vendors/independent contractors metadata (name/email/status/IDs and summary signals), widget configuration/embed code. • The plugin does NOT transmit taxpayer identification numbers (TIN/SSN/FEIN). When data is sent: • Only after explicit user action (administrator clicks Connect, runs Sync actions, or generates widget code). No automatic background transmission. Where data is sent: • MyPowerly service (primary): https://mypowerly.com • Optional widget embeds: depends on embed code you generate Note: Widget embed code may load third-party scripts/iframes from: • https://mypowerly.com • https://1099automation.com Why data is sent: • To connect your WordPress site to your MyPowerly account and perform user-initiated sync and widget features. Consent rules: • Explicit user action required (administrator clicks Connect/Sync/Generate Widget Code) • No pre-checked boxes: consent checkboxes not pre-selected • No auto-sync: plugin does not automatically sync data in background • No silent tracking: no third-party analytics/tracking scripts for visitor behavior No sensitive tax data stored in WordPress • Plugin not intended to store completed W-9 form values, signatures, or completed W-9 PDFs in WordPress database. • W-9 form data processed in browaser to generate PDF. Data discarded when page closed/refreshed if flow not completed. • Plugin may cache blank W-9 PDF template (file bytes only) in WordPress transient. Cached template does not include user-entered form values. Data transmission • Data transmitted to external MyPowerly service(s) only after explicit user action (Connect, Sync, Generate Widget Code). External Services This plugin connects to the following external services to provide specific features. 1) MyPowerly Service What it is used for: API integration for payees / affiliates / vendors / independent contractors data syncing, plugin management features, and support-related functionality in the WordPress admin. What data is sent: depending on the feature you use, the plugin may send connection / credential data during setup, payees / affiliates / vendors / independent contractors data, plugin and site information, and W-9 form data entered in the WordPress admin. When data is sent: during connection setup and only when an administrator performs an explicit action such as connecting the site, running synchronization processes, or using admin features that communicate with MyPowerly. Terms of Service: https://1099automation.com/w9-1099-chaser/terms/ Privacy Policy: https://1099automation.com/w9-1099-chaser/privacy-policy/ Third-Party Services This plugin makes external requests to the following services: MyPowerly (required for connection and sync): https://mypowerly.com Widget embeds (optional): depends on the widget embed code you choose to generate and embed. Data Handling Transparency No ads. No hidden data collection. Connect/sync actions are initiated by an administrator. Widget Disclosure The plugin includes a widget feature that can output embed code (for example, iframe/script code) obtained from the connected external service. The widget is optional and must be enabled/configured by an administrator. The widget may display on the front-end depending on your settings (auto display, selected pages, or …