Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs XML Sitemap & Google News

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!

Take control of your WordPress core XML Sitemap and add a Google News Sitemap. Compatible with WordPress Multisite, Polylang and WPML and most caching plugins. There are no static files created. NEW: Connect your site to your Google Search Console and Bing Webmaster Tools to keep an eye on sitemap performance and possible errors. NEW: Submit your sitemaps right from the WordPress admin. Yes, you read that correctly: Sitemap Pings are back! Features Control the WordPress core XML Sitemaps. Add a Google News Sitemap. Connect your site to Google Search Console and Bing Webmaster Tools to keep an eye on sitemap performance and possible errors. Submit/ping sitemaps to Google Search Console and Bing Webmaster Tools for fast reindexation. Add custom robots.txt rules. XML Sitemap Option to disable the main XML Sitemap Index. Select sitemaps to include in the sitemap index: post types, taxonomies, authors and google news. Select which (custom) post types, taxonomy archives and users to include in respective sitemaps. Exclude specific posts, pages and custom post type posts from sitemaps. Add a custom sitemap with external URLs. Add external sitemaps. Choose the sitemap server/generator: WordPress core or Plugin. Plugin server: Include featured images or attached images with title. Choose to update Last modification date only on post modification (default) or also on comments. Sitemap stylesheet templates can be overridden by theme template files. Google News Sitemap Optionally activate the Google News Sitemap. Includes the required news sitemap tags: Publication name, language, title and publication date. Set a News Publication Name (site name by default). Supports custom post types. Limit inclusion of certain post categories. Google News Sitemap stylesheet template can be overridden by theme template files. Pro Extensions XML Sitemap Advanced Sitemap notifier: Automatic XML Sitemap Index update notification to Google and Bing. Sitemap notifier log Set a custom sitemap URL (slug) Exclude posts and pages in the Bulk Editor. Optionally include empty taxonomy term and empty author archives Yoast SEO and Rank Math compatibility: exclude posts set to noindex Google News Advanced Sitemap norifier: Automatic Google News Sitemap update notification to Google. Sitemap notifier log Multiple post types – Include more than one post type in the same News Sitemap. Keywords – Add the keywords tag to your News Sitemap. Keywords can be created from Tags, Categories or a dedicated Keywords taxonomy. Stock tickers – Add stock tickers tag to your News Sitemap. A dedicated Stock Tickers taxonomy will be available to manage them. Privacy / GDPR This plugin does not collect any user or visitor data nor set browser cookies. Using this plugin should not impact your site privacy policy in any way. Data that is published An XML Sitemap index, referencing other sitemaps containing your web site’s public post URLs of selected post types that are already public, along with their last modification date and associated image URLs, and any selected public archive URLs. An author sitemap can be included, which will contain links to author archive pages. These urls contain author/user slugs, and the author archives can contain author bio information. If you wish to keep this out of public domain, then deactivate the author sitemap and use an SEO plugin to add noindex headers to the respective archive pages. A Google News Sitemap containing your web site’s public and recent (last 48 hours) URLs of selected news post type, along with their publication time stamp and associated image URL. Data that is transmitted when a connection between your site and Google Search Console is configured in this plugin, the sitemap index and google news sitemap can be submitted to Google. No data is transmitted to any third party. Contribute If you’re happy with this plugin as it is, please consider writing a quick rating or helping other users out on the support forum. If you wish to help build this plugin, you’re very welcome to translate it into your language or contribute code on Github. Credits XML Sitemap Feed was originally based on the discontinued plugin Standard XML Sitemap Generator by Patrick Chia. Since then, it has been completely rewritten and extended in many ways. NOTES: If you do not use fancy URL’s or you have WordPress site running in a subdirectory, a dynamic robots.txt will NOT be generated. On large sites, it is advised to use a good caching plugin to improve your site and sitemap performance.