Swairish Site Security

Swairish Site Security helps site owners monitor and respond to WordPress security threats from wp-admin.

Free features include:

• Security dashboard with event totals, severity mix, category summaries, and recent events.
• Audit event log with IP address, method, URI, user agent, severity, category, risk score, and context.
• Suspicious HTTP request detection for SQL injection, cross-site scripting, remote code execution, file inclusion, scanner probes, user enumeration, and upload indicators.
• Monitor or block firewall modes with manual IP/CIDR blocklist controls.
• Rate limiting and login brute-force protection.
• Malware and file scanner for suspicious PHP, web-shell indicators, executable uploads, risky permissions, recent executable changes, and WordPress core checksum drift.
• Focused tools for suspicious files, sensitive files, file monitoring, obfuscated PHP, file permissions, core integrity, and quarantine response.
• Quarantine, restore, delete, and selected-finding CSV/JSON export controls.
• Hardening options for XML-RPC, REST API restriction, WordPress version hiding, custom login URL, directory indexing, security headers, author enumeration, and file permission review.
• CAPTCHA protection with a built-in math challenge for WordPress and WooCommerce forms.
• HTML and A4 PDF security reports with site details, settings, recent events, hardening status, and scan summary.
• Evidence backup exports for incident handoff.
• CSV/JSON compliance exports, retention cleanup, pagination, and bulk actions.