Safe Sites vs Security Ninja For MainWP

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected. Key Features Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA. Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux). Visual File Permissions Map – See a color-coded structure of your site’s file security. Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal. Security Dashboard – View a complete overview of your site’s security health. Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts. Login & User Security – Monitor login attempts and manage user sessions. Site Hardening – Apply recommended security tweaks to your WordPress installation. Code Signing – Verify the integrity of your plugin files. Detailed Features General Security & Server Health: SSL Status – Check if SSL is active for secure connections. Site Health & Server Info – Displays PHP version, database version, and server details. Panic Mode – Quickly lock down your site in case of an emergency. Access & User Security: Two-Factor Authentication (2FA): TOTP Support – Use Google Authenticator, Authy, or any TOTP app. Configurable for All Roles – Require 2FA for specific user roles. Backup Codes – Generate backup codes for emergency access. Login Monitoring – Track failed login attempts and monitor user activity. Security Monitoring & Protection: File Permissions Management: Windows Servers – Show file read/write permissions. Linux Servers – Display numeric file permissions along with current and recommended settings. Fix Permissions – Select files and fix incorrect permissions directly. Visual File Permission Map – Interactive file structure with security indicators. Hardening – One-click security hardening for common WP vulnerabilities. Code Signing – Ensure plugin files haven’t been tampered with. Malware & Security Scanner: Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API. Security Header & DNS Scan – Check security headers and DNS settings. Alert System – Receive alerts for detected threats. WordPress Management & Security: Plugin & Theme Security: Vulnerability Scanner – Check for known security flaws. Inactive Plugin Alerts – Warns about inactive components that pose risks. Security Dashboard – A centralized panel for all security settings. External Services Used Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies: 1. VirusTotal API Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats. What data is sent & when? – When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. – No user private data is sent—only the target URLs/domains or hash values of files are transmitted. Terms of Service & Privacy Policy: – VirusTotal Terms of Service – VirusTotal Privacy Policy

Security Ninja helps you identify vulnerabilities and harden the security of your WordPress websites. Paired with MainWP, you can manage and monitor connected sites from one central dashboard. This MainWP extension brings Security Ninja into your MainWP dashboard so you can manage and monitor all connected sites from one place. Free version: Run Security Ninja Security Tests and Core Scanner remotely on one or more child sites. Refresh vulnerability lists in bulk (requires Security Ninja 5.297+ on children). View results for all connected sites: vulnerabilities (plugins and themes), Security Tests table, and Core Scanner summary. Malware Scanner summary (last run and count) appears when the child site has Security Ninja Pro. The Security Ninja column in the MainWP Sites table shows test score and vulnerability count. The extension page shows a Pro upsell for fleet events and alerts. Per-site Scan results includes a Run scans button. Pro version: Everything in Free, plus a tabbed fleet workspace on the extension page: Overview – Fleet triage cards (firewall off, vulnerabilities, recent blocks, low score, malware, outdated child, stale sync) with suggested next steps when a count is above zero, plus Top incidents (7 days). Events – Unified events log across Pro children, with site and action filters, search, and event details. Settings – Optional daily fleet email alerts (multi-recipient digests with rule toggles), plus metrics history used by client reports. Also in Pro: full malware scan file list on the per-site tab; copy settings from one synced Pro child onto many sites; bulk IP manage (add/remove whitelist or blacklist, lift ban / 404); White Label bulk action; per-site Settings editor (including blocked countries and path lists when children run 5.297+); daily metrics history (about 90 days) that feeds score/vuln progress in Pro Reports; Pro Reports tokens for Security Ninja data (see FAQ). Event logs, settings, IP management, and full malware details require Security Ninja Pro on child sites. Note: Free child sites sync Security Tests scores, vulnerability count and details, and Core Scanner summary to MainWP. Pro child sites additionally sync event logs, malware scan details, settings, IP management entries, and AI Security Advisor summaries. Remote IP management and enriched event details require Security Ninja 5.285+ on child sites and Security Ninja for MainWP 2.1.1+ on the dashboard. Remote settings apply requires Security Ninja 5.285+ (array settings such as blocked countries need 5.297+). After bulk actions, use MainWP Sync on the same selection to refresh the dashboard. Fleet alert emails use WordPress mail on the MainWP dashboard; configure SMTP if messages do not arrive. This extension helps you save time, stay in control, and manage security across all your sites, whether you handle a handful or hundreds. MainWP is an invaluable tool for those who manage multiple WordPress websites. To combine the two, you need to install this extension on your master MainWP website. Links and Documentation Security Ninja for MainWP Extension Page Get Started with MainWP and Security Ninja Install the Security Ninja MainWP extension from within the MainWP dashboard Login to your MainWP dashboard Navigate to WP > Plugins Search for ‘Security Ninja MainWP’ Install and activate the plugin Install the Security Ninja MainWP extension manually Download the plugin Login to your MainWP dashboard Navigate to WP > Plugins Click Add New and then Upload Plugin Browse to the file, select it and click Install Now Click Activate Plugin once prompted.