Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs Zavora 360

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!

This is the official Zavora 360 plugin, built and maintained by Royal Bengal AI — the team behind the Zavora 360 Virtual Receptionist platform at zavora360.royalbengal.ai. Zavora 360 is a Virtual Receptionist that answers your website visitors’ questions in real time using advanced voice technology. This plugin adds a floating “Talk to Us” button to your WordPress site — visitors click it, a small popup opens, and they’re talking to your custom-trained Virtual Receptionist within seconds. As of v1.2.0, you can also add a floating Chat button so visitors who prefer text get the same Virtual Receptionist in a chat window. The agent speaks the visitor’s language (English, Hindi, Bengali, Spanish, Arabic, French, and more), is trained on your own knowledge base, and is available 24/7. No phone calls needed — it all runs in the browser. What this plugin does Adds a floating “Talk to Us” voice button to every page of your site (configurable) Adds a floating Chat button alongside the voice button (v1.2.0+, independent toggle) Lets you place either surface mid-content with the [zavora_360] (voice) and [zavora_360_chat] (chat) shortcodes Customize each button’s color, label, position, and size independently Hide either button on specific pages, or only show on specific pages Auto-detects WooCommerce and lets you hide both buttons on cart/checkout Requires a Zavora 360 account This plugin is the WordPress connector for the Zavora 360 platform. You’ll need an account at zavora360.royalbengal.ai — the Free plan includes 10 minutes per month at no cost and no credit card. Privacy and data This plugin doesn’t collect or transmit any visitor data on its own. When a visitor clicks the button, a popup window opens pointing to the Zavora 360 platform (zavora360.royalbengal.ai). All voice processing happens there, under Zavora 360’s privacy policy. The plugin stores your API key and display preferences in your WordPress database (wp_options table). No visitor data is stored by the plugin. External services This plugin connects to the Zavora 360 platform, an external service provided by Royal Bengal AI. The connection is required for the plugin to function — without a valid Zavora 360 account and API key, the button will not load. The plugin does not contact any other third-party services. What the plugin sends to Zavora 360: When you save an API key on the settings page, the plugin makes a single GET request to https://zavora360.royalbengal.ai/api/external/widget-config with the API key in an X-API-Key header. This validates the key and fetches your account’s button configuration (label, color, position, size, plan, minute balance). The request also includes a User-Agent header in the form Zavora360-WP/{version}; {your-site-url}/ so the platform’s logs can distinguish plugin traffic from other API consumers. When a visitor clicks the Talk-to-Us button, a popup window opens at https://zavora360.royalbengal.ai/call?company={your-company-slug}. The browser handles the voice conversation directly with the platform from that point on — the plugin and your WordPress server are not involved in the conversation itself. What the plugin does NOT send: No visitor data (name, email, IP, behavior) is sent to Zavora 360 by the plugin. No post content, page content, or WordPress database content is sent. No data about your other WordPress plugins or theme is sent. The plugin makes no analytics, tracking, or telemetry calls of any kind. When the calls happen: The widget-config API call runs once when you save the API key on the settings page, and again whenever you click “Refresh config” on the same page. It does not run on visitor page loads — the configuration is cached in WordPress options. The popup-window URL is constructed in the browser when the visitor clicks the button. No server-side call from your WordPress site is made at click time. Terms and privacy: Zavora 360 terms of service: https://zavora360.royalbengal.ai/terms Zavora 360 privacy policy: https://zavora360.royalbengal.ai/privacy By using this plugin, you agree to the Zavora 360 terms of service. If you are subject to GDPR or similar privacy regulations, you should mention Virtual Receptionist usage in your own site’s privacy policy.