• Skip to primary navigation
  • Skip to content
  • Skip to primary sidebar
  • Skip to footer

Sucuri Blog

Website Security News

  • Products
    • Website Security Platform
    • Website Firewall (WAF)
    • Enterprise Website Security
    • Multisite Solutions
  • Features
    • Detection
    • Protection
    • Performance
    • Response
    • Backups
  • Partners
    • Agency Solutions
    • Partners
    • Referral Program
    • Ecommerce
  • Resources
    • Guides
    • Webinars
    • Infographics
    • SiteCheck
    • Reports
    • Email Courses
  • Immediate Help
  • Login

Sucuri Security WordPress Plugin Free To Clients: Getting Proactive with Web Malware

April 25, 2012Tony Perez

FacebookTwitterSubscribe

We are happy to announce that our premium WordPress plugin is now for free to all our existing and new clients. The plugin is a great compliment to our malware scanning and remediation services and provides a large array of features designed to help you combat the growing web malware problem.

Note: the plugin is available under all our existing plans for all our users.

We have started to get questions that ask whether this is the only plugin required for all your security needs, the answer is “no”. It is meant to compliment your arsenal and help you become more proactive when it comes to securing your WordPress instance.

The Features

The plugin is tightly packed with useful features for every WordPress administrator. Features include:

  • Web Application Firewall. Blocking attacks before it reaches your site.
  • Integrity Monitoring. you will be notified if any of your files are modified.
  • Audit Logs. You will know everything that is happening inside WordPress, new users, new posts, login failures, login success, etc
  • 1-click Hardening. Simple, easy to use hardening options for your site.

Web Application Firewall (WAF)

The WAF is a unique feature that is designed to intelligently protect your sites from brute-force attacks like dictionary attacks and other similar unauthorized access attempts. When a bad IP is identified it is blacklisted in your admin dashboard. If it was an unintentional block, you have the ability to white-list access to any IP.

Why is it so unique?

The WAF is not tied to your application, it communicates with our servers and allows us to see malicious attacks across the network. When one client gets attacked by one bad IP in Croatia, we are able to push preventive measures to every plugin to protect against that IP.

The WAF proactively blocked attacks on our sample group which enabled us to identify and record over 22,000 bad IP’s. As the network grows with users so will the list. This does not include our own list of bad IP’s and domains that are maintained via our normal monitoring and remediation processes. These too get pushed to the plugin proactively protecting the website from external attacks.

Integrity Monitoring

This feature compares your core install against a clean version of core. In other words, if it is not a 1-to-1 match with core you will be notified of a problem.

Audit Trails

Audit trails let you monitor changes for a large number of actions. These include:

  • Log in attempts
  • New Posts
  • Failed Logins
  • New Plugins
  • File Changes
  • New Users
  • New Attachments
  • Delete Actions (users and posts)
  • Revisions
This was designed for the proactive webmaster that wants to monitor their website to ensure no unauthorized access or changes are made without prior approval.

 

1-Click Hardening

In our experience a high-percentage of the infections we see every day come from poor management on the end-user’s part. This feature uses common hardening measures that can be taken at any time and helps reduce infection risk.

This feature performs the following:

  • Checks software core version
  • Hides your version (security through obscurity)
  • Upload directory protected
  • Secret keys and salts created
  • Configuration file hardening/location verification
  • Hardening of readme file
  • PHP verification

For more information contact us at info@sucuri.net.

 

FacebookTwitterSubscribe

Categories: Sucuri Updates, WordPress SecurityTags: Malware Cleanup, Sucuri WordPress Plugin

About Tony Perez

Tony is the Head of Security Products at GoDaddy and Sucuri Co-Founder. His passion lies in educating and bringing awareness about online threats to business owners. His passions revolve around understanding the psychology of bad actors, the impacts and havoc hacks have on website owners, and thinking through the evolution of attacks. You can find his personal thoughts on security at perezbox.com and you can follow him on Twitter at @perezbox.

Reader Interactions

Comments

  1. Eric Bobrow

    January 13, 2014

    I am a responsible web citizen, and have found that the Sucuri IP blacklist has stopped me from commenting on one of my favorite sites, regardless of whether I am logged in from the cafe via wifi, through my iPhone tethering (via Verizon), or from home (my normal or long-term IP).

    I am friends with the blogger whose site is restricting me, so we are looking into the issue, but I am concerned about this restriction and how IPs get blacklisted and how to inquire and remove blocks that are inappropriately made.

Primary Sidebar

Socialize With Sucuri

We're actively engaged across multiple platforms. Follow us and let's connect!

  • Facebook
  • Twitter
  • LinkedIn
  • YouTube
  • Instagram
  • RSS Feed

WordPress Security Course

Getting Started with Sucuri Webinar

Getting Started with Sucuri Guide

WordPress Security Guide

Join Over 20,000 Subscribers!

Footer

Products

  • Website Firewall
  • Website AntiVirus
  • Website Backups
  • WordPress Security
  • Enterprise Services

Solutions

  • DDos Protection
  • Malware Detection
  • Malware Removal
  • Malware Prevention
  • Blacklist Removal

Support

  • Blog
  • Knowledge Base
  • SiteCheck
  • Research Labs
  • FAQ

Company

  • About
  • Media
  • Events
  • Employment
  • Contact
  • Testimonials
  • Facebook
  • Twitter
  • LinkedIn
  • Instagram

Customer Login

Sucuri Home

  • Terms of Use
  • Privacy Policy
  • Frequently Asked Questions

© 2022 Sucuri Inc. All rights reserved

Sucuri Cookie Policy
See our policy>>

Our website uses cookies, which help us to improve our site and enables us to deliver the best possible service and customer experience.