Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs EU VAT Assistant for WooCommerce

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!

Important The EU VAT Assistant reached its end of life on the 30th of June 2022 (see the announcement from January 2022). The plugin is still functional and it can be used, but it’s no longer maintained or supported. We’re keeping it available for a while longer as a courtesy to existing users who have developers who can take care of its maintenance and troubleshooting. For more information about the plugin retirement and the recomemnded alternative, please refer to the sticky post in the support forum: EU VAT Assistant – End of life and recommended alternative. This is a full version of the premium EU VAT Assistant plugin We are proud to say that this is the most powerful free EU VAT solution on the market. It was designed with you, the merchant, in mind, and it will make it easier to deal with the new, complex EU VAT regulations. this plugin was developed by Aelia Team – The WooCommerce internationalisation experts. The EU VAT Assistant for WooCommerce is designed to help achieving compliance with the new European VAT regulations, coming into effect on the 1st of January 2015. Starting from that date, digital goods sold to consumers in the European Union are liable to EU VAT, no matter where the seller is located. The VAT rate to apply to each sale is the one charged in the country of consumption, i.e. where the customer resides. These new rules apply to worldwide sellers, whether resident in the European Union or not, who sell their products to EU customers. For more information: EU: 2015 Place of Supply Changes – Mini One-Stop-Shop. How this plugin will help you The EU VAT Assistant plugin extends the standard WooCommerce sale process and calculates the VAT due under the new regime. The information gathered by the plugin can then be used to prepare VAT reports, which will help filing the necessary VAT/MOSS returns. Tracks and records customers’ location. The EU VAT Assistant plugin also records details about each sale, to prove that the correct VAT rate was applied. This is done to comply with the new rules, which require that at least two pieces of non contradictory evidence must be gathered, for each sale, as a proof of customer’s location. The evidence is saved automatically against each new order, from the moment the EU VAT compliance plugin is activated. Collects evidence required by the new regulations. All the data used to determine the VAT regime to apply is recorded in real-time, stored with the order and made available as needed. Accepts and validates EU VAT numbers, adjusting VAT accordingly. Validation of European VAT numbers is performed via the official VIES service, provided by the European Commission. This feature is equivalent to the one provided by the EU VAT Number plugin. Supports a dedicated VAT currency, which is used to generate the reports. You can sell in any currency you like, the EU VAT Assistant plugin will take care of converting the VAT amounts to the currency you will use to file your returns. Can automatically populates the VAT rates for all EU countries. With a single click, you enter the VAT rates for all 28 EU countries. No more tedious manual typing! Includes advanced Reports EU VAT report by Country. This report will show you all the VAT collected under the VAT MOSS regime, as well as the VAT collected for your domestic VAT return. VIES report. This report shows all the supplies provided to B2B customers. INTRASTAT report. This report shows all the sales made to the EU. Sales by Country (in development). Supports ECB exchange rates in VAT MOSS reports. VAT MOSS Reports can use either the exchange rate saved with each order, or the European Central Bank rate required to produce the official VAT MOSS returns (ref. official documentation). This feature will allow you to use the most appropriate rate when producing your domestic VAT return and the VAT MOSS return. Supports mixed products/services scenarios. The new EU VAT MOSS regime applies to the sale of digital products and services that do not require significal manual intervention. Sale of services that are provided with human intervention, such as support, consultancy, design, are still subject to VAT at source. In this case, VAT has to be paid to the revenue in merchant’s country. WooCommerce allows to specify to which country a tax applies, but not to which country it should be paid once collected. The EU VAT Assistant can help, by allowing merchants to specify the “payable to” country for each VAT. Such information is then displayed in the VAT reports. Allows to force B2B or B2C sales. You can decide if you wish to force customers to a valid EU VAT number at checkout, thus accepting only B2B transactions, or prevent them from doing it, thus accepting only B2C transactions. Can prevent sales to specific countries. You can exclude some countries from the list of allowed ones, thus preventing customers from those countries from placing an order. It’s fully compatible with our internationalisation solutions, such the WooCommerce Currency Switcher, for multi-currency support, Prices by Country, Tax Display by Country and Prices by Role (coming soon). Automatically updates the exchange rates that are be used to produce the VAT reports in the selected VAT currency. The plugin can fetch exchange rates from the following providers: European Central Bank HM Revenue and Customs service Bitpay Irish Revenue (experimental) Danish National Bank (sponsored by Asbjoern Andersen). Fully supports refunds. Refunds were introduced in WooCommerce 2.2, and support for it was added to our plugin right from the start. Integrates with PDF Invoices and Packing Slips plugin, to automatically generate EU VAT-compliant invoices. Requirements WordPress 4.0 or newer. PHP 7.1 or newer. WooCommerce 3.5 or newer. Aelia Foundation Classes framework 2.1.0.201112 or newer. Disclaimer This product has been designed to help you fulfil the requirements of the following new EU VAT regulations: Identify customers’ location. Collect at least two non-contradictory pieces of evidence about the determined location. Apply the correct VAT rate. Ensure that VAT numbers used for B2B transactions are valid before applying VAT exemption. Collect all the data required to prepare VAT returns. We cannot, however, give any legal guarantee that the features provided by this product will be sufficient for you to be fully compliant. By using this product, you declare that you understand and agree that we cannot take any responsibility for errors, omissions or any non-compliance arising from the use of this plugin, alone or together with other products, plugins, themes, extensions or services. It will be your responsibility to check the data produced by this product and file accurate VAT returns on time with your Revenue authority. For more information, please refer to our terms and conditions of sale and support.