About this plugin
Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected.
Key Features
- Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA.
- Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux).
- Visual File Permissions Map – See a color-coded structure of your site’s file security.
- Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal.
- Security Dashboard – View a complete overview of your site’s security health.
- Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts.
- Login & User Security – Monitor login attempts and manage user sessions.
- Site Hardening – Apply recommended security tweaks to your WordPress installation.
- Code Signing – Verify the integrity of your plugin files.
Detailed Features
General Security & Server Health:
- SSL Status – Check if SSL is active for secure connections.
- Site Health & Server Info – Displays PHP version, database version, and server details.
- Panic Mode – Quickly lock down your site in case of an emergency.
Access & User Security:
- Two-Factor Authentication (2FA):
- TOTP Support – Use Google Authenticator, Authy, or any TOTP app.
- Configurable for All Roles – Require 2FA for specific user roles.
- Backup Codes – Generate backup codes for emergency access.
- Login Monitoring – Track failed login attempts and monitor user activity.
Security Monitoring & Protection:
- File Permissions Management:
- Windows Servers – Show file read/write permissions.
- Linux Servers – Display numeric file permissions along with current and recommended settings.
- Fix Permissions – Select files and fix incorrect permissions directly.
- Visual File Permission Map – Interactive file structure with security indicators.
- Hardening – One-click security hardening for common WP vulnerabilities.
- Code Signing – Ensure plugin files haven’t been tampered with.
Malware & Security Scanner:
- Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API.
- Security Header & DNS Scan – Check security headers and DNS settings.
- Alert System – Receive alerts for detected threats.
WordPress Management & Security:
- Plugin & Theme Security:
- Vulnerability Scanner – Check for known security flaws.
- Inactive Plugin Alerts – Warns about inactive components that pose risks.
- Security Dashboard – A centralized panel for all security settings.
External Services Used
Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies:
1. VirusTotal API
Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats.
What data is sent & when?
– When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis.
– No user private data is sent—only the target URLs/domains or hash values of files are transmitted.
Terms of Service & Privacy Policy:
– VirusTotal Terms of Service
– VirusTotal Privacy Policy