Swairish Site Security with SOC helps site owners monitor and respond to WordPress security threats from wp-admin.
Free features include:
- Security dashboard with event totals, severity mix, category summaries, and recent events.
- Audit event log with IP address, method, URI, user agent, severity, category, risk score, and context.
- Suspicious HTTP request detection for SQL injection, cross-site scripting, remote code execution, file inclusion, scanner probes, user enumeration, and upload indicators.
- Monitor or block firewall modes with manual IP/CIDR blocklist controls.
- Rate limiting and login brute-force protection.
- Malware and file scanner for suspicious PHP, web-shell indicators, executable uploads, risky permissions, recent executable changes, and WordPress core checksum drift.
- Focused tools for suspicious files, sensitive files, file monitoring, obfuscated PHP, file permissions, core integrity, and quarantine response.
- Quarantine, restore, delete, and selected-finding CSV/JSON export controls.
- Hardening options for XML-RPC, REST API restriction, WordPress version hiding, custom login URL, directory indexing, security headers, author enumeration, and file permission review.
- CAPTCHA protection with a built-in math challenge for WordPress and WooCommerce forms.
- HTML and A4 PDF security reports with site details, settings, recent events, hardening status, and scan summary.
- Evidence backup exports for incident handoff.
- CSV/JSON compliance exports, retention cleanup, pagination, and bulk actions.