Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs WP STAGING – WordPress Backups, Restore, Migration & Clone

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!

WordPress Backup, Restore, Staging, Cloning & Migration — All in One WP STAGING is the all-in-one WordPress backup, restore, staging, cloning, and migration plugin, built for professional workflows with 100% unit-tested code, thousands of automated tests, and extensive end-to-end testing across supported PHP versions. Create a full backup or an exact clone or copy of your website in minutes. Use it to duplicate your site, test plugin and theme updates safely, restore your site when needed, move or migrate WordPress to another server, transfer your site to a new host, or build a staging copy before making changes. WP STAGING also works as a WordPress duplicator, so you do not need a separate duplicator plugin to copy your website. WP STAGING reliably backs up, clones, and migrates WooCommerce stores too, including orders, products, and customer data. WP STAGING is developed in Germany and designed for agencies, developers, and businesses that need reliable WordPress backup, recovery, staging, restore, and migration workflows. WP STAGING | PRO also includes advanced workflows such as Remote Sync, which lets you pull a WordPress site securely from one server to another using an API key, and WP STAGING CLI, which can turn a WP STAGING backup into a local Docker-based development site. All data stays on your server unless you choose a transfer or remote storage workflow. WP STAGING is designed for speed, reliability, and low-resource environments, including shared hosting. WP STAGING automatically performs search and replace for links and paths during cloning, backup, restore, and migration workflows. This staging and backup plugin can clone your website quickly and efficiently, even if it is running on a weak shared hosting server. WP STAGING FREE – BACKUP & STAGING FEATURES Clone the entire production site into a subdirectory like example.com/staging-site. High-performance backup and cloning, even for websites with very large databases. Create full or partial backups — full-site backup, database-only, or files-only backups. Scheduled backups with automatic daily backups. Easy to use: create a clone or backup in one click. Efficient background processing without slowing down your website. No Software as a Service and no external account required. All your data stays on your server. Your data belongs to you only. No server timeouts on huge websites or weak servers. Fast backup, clone, and restore workflows depending on site size and server resources. Use the clone as part of your backup and update strategy. Only administrators can access the cloned or backup website. SEO-friendly staging sites with login protection and no-index handling. The admin bar on the staging / backup website is orange colored and shows when you work on the staging site. Extensive logging features. Supports Apache, Nginx, Microsoft IIS, and LiteSpeed Server. Every release passes extensive automated tests to keep the plugin robust, reliable, and fast. Fast and professional support team. WP STAGING | PRO – BACKUP & STAGING FEATURES The features below are available in WP STAGING | PRO. Remote Sync – Pull a WordPress site securely from one server to another. WP STAGING CLI – Turn a backup into a local Docker-based development site. Migrate and transfer WordPress to another host or domain. Push staging changes to production (staging to live), including plugins, themes, and media files, with one click. Clone a backup or staging site to a separate database. Choose a custom directory for a backup or cloned site. Select a custom subdomain destination like dev.example.com. Define user roles for accessing the clone or backup site. This can be clients or external developers. Multisite support for migration, backup, and cloning. Schedule recurring backups by time and interval. Download and upload backups to another server for migration and transfer. Backup retention settings. Custom backup names. Email notifications if a backup cannot be created. WordPress multisite backup and restore. Cloud backup, offsite backup, and remote backups to external storage providers. Backup to Google Drive. Backup to Amazon S3. Backup to (S)FTP. Backup to Dropbox. Custom backup folder destinations for cloud storage providers. Priority support. DOCUMENTATION How to Backup and Restore WordPress Backup and Restore WordPress Backup & Transfer WordPress Site to Another Host How to Migrate Your WordPress Site to a New Host Remote Sync Pull a WordPress Site from One Server to Another Local Docker Development with WP STAGING CLI WP STAGING CLI – Upgrade Now All Backup Guides All Backup Guides Working with Staging Sites Working with Staging Sites FAQ for Backup & Cloning FAQ for Backup & Cloning Troubleshooting Backup & Cloning Troubleshooting Backup & Cloning WP STAGING BACKUP & CLONING TECHNICAL REQUIREMENTS & INFORMATION Works on latest version of WordPress Minimum Supported WordPress Version 3.8 Cloning and Backup work on all webhosts No extra libraries required Backup & cloning supports huge websites Custom backup format is much faster and smaller than any tar or zip compression Backup & cloning works in low memory & shared hosting environments SUPPORT WP STAGING Backup & Cloning