Security Ninja For MainWP vs Server Security Scan

Security Ninja helps you identify vulnerabilities and harden the security of your WordPress websites. Paired with MainWP, you can manage and monitor connected sites from one central dashboard. This MainWP extension brings Security Ninja into your MainWP dashboard so you can manage and monitor all connected sites from one place. Free version: Run Security Ninja Security Tests and Core Scanner remotely on one or more child sites. Refresh vulnerability lists in bulk (requires Security Ninja 5.297+ on children). View results for all connected sites: vulnerabilities (plugins and themes), Security Tests table, and Core Scanner summary. Malware Scanner summary (last run and count) appears when the child site has Security Ninja Pro. The Security Ninja column in the MainWP Sites table shows test score and vulnerability count. The extension page shows a Pro upsell for fleet events and alerts. Per-site Scan results includes a Run scans button. Pro version: Everything in Free, plus a tabbed fleet workspace on the extension page: Overview – Fleet triage cards (firewall off, vulnerabilities, recent blocks, low score, malware, outdated child, stale sync) with suggested next steps when a count is above zero, plus Top incidents (7 days). Events – Unified events log across Pro children, with site and action filters, search, and event details. Settings – Optional daily fleet email alerts (multi-recipient digests with rule toggles), plus metrics history used by client reports. Also in Pro: full malware scan file list on the per-site tab; copy settings from one synced Pro child onto many sites; bulk IP manage (add/remove whitelist or blacklist, lift ban / 404); White Label bulk action; per-site Settings editor (including blocked countries and path lists when children run 5.297+); daily metrics history (about 90 days) that feeds score/vuln progress in Pro Reports; Pro Reports tokens for Security Ninja data (see FAQ). Event logs, settings, IP management, and full malware details require Security Ninja Pro on child sites. Note: Free child sites sync Security Tests scores, vulnerability count and details, and Core Scanner summary to MainWP. Pro child sites additionally sync event logs, malware scan details, settings, IP management entries, and AI Security Advisor summaries. Remote IP management and enriched event details require Security Ninja 5.285+ on child sites and Security Ninja for MainWP 2.1.1+ on the dashboard. Remote settings apply requires Security Ninja 5.285+ (array settings such as blocked countries need 5.297+). After bulk actions, use MainWP Sync on the same selection to refresh the dashboard. Fleet alert emails use WordPress mail on the MainWP dashboard; configure SMTP if messages do not arrive. This extension helps you save time, stay in control, and manage security across all your sites, whether you handle a handful or hundreds. MainWP is an invaluable tool for those who manage multiple WordPress websites. To combine the two, you need to install this extension on your master MainWP website. Links and Documentation Security Ninja for MainWP Extension Page Get Started with MainWP and Security Ninja Install the Security Ninja MainWP extension from within the MainWP dashboard Login to your MainWP dashboard Navigate to WP > Plugins Search for ‘Security Ninja MainWP’ Install and activate the plugin Install the Security Ninja MainWP extension manually Download the plugin Login to your MainWP dashboard Navigate to WP > Plugins Click Add New and then Upload Plugin Browse to the file, select it and click Install Now Click Activate Plugin once prompted.

♦ Check your server’s overall security ♦ Detect unsafe PHP settings ♦ Detect unsafe PHP functions ♦ Check for security modules ♦ Detect unwanted write permissions ♦ Detect all errors and error levels Server Security Scan identifies possible vulnerabilities and loopholes in your sever by inspecting various PHP configurations and settings, checking write permissions of directories, checking for presence of security modules and by detecting the presence of any unsafe PHP functions. Thus it helps to protect your server from various possible web site hacks such as variable injection, code injection and SQL injection etc. Unsafe PHP configuration scan Server Security Scan checks for certain PHP configurations in your server to identify whether they are configured safely so as to safeguard your server from hackers. The scanner suggests possible issues of wrongly configuring these settings as well as the criticality level of misconfiguring these settings. Unsafe PHP function scan Hackers may misuse some of the PHP functions which you do not use in your applications. Often these functions might be enabled by default in most of the servers. The Server Security Scanner detects whether such functions are enabled in your server and suggests the criticality level and issues related to those functions. Directory permission scan It is unsafe to leave your web accessible directories with write permission. The Server Security Scanner detects all writable folder permissions and reports them. Security module scan There are certain PHP extensions which can be used to enhance the security of your PHP installation. The Server Security Scan detects whther such modules are installed on your server and reprts the same. The Server Security Scan detects various possiblities of hacking your server and reports them. The items are reported with criticality of each of the detection. You may contact your host to get the issues rectified if you are not familiar with updating server configurations. About Server Security Scan is developed and maintained by wordpressutils. More Information Troubleshooting Please read the FAQ first if you are having problems. Requirements WordPress 2.8+ PHP 5+