Tag: security tools

Sensible Safety Instruments: Firewall Addon (Add-ons)
Purchase $9.00

This is NOT standalone plugin and it can’t be used on its own. This is an addon for Smart Security Tools plugin for WordPress, and it is also available on CodeCanyon here:

You need to purchase and install this main plugin first. Do not attempt to use this addon on its own, it will not work.

Addon Information

Smart Security Tools: Firewall Addon adds 5 extra scanners for URL and user agent used for requests to filter out known and potential vulnerabilities. This addon performs similar tasks as some of the .htaccess tweaks Smart Security Tools plugin has already, but in many cases users report that they can’t use .htaccess tweaks due to server limitations (it works with Apache only and in some cases hosting company can limit what .htaccess can be used for).

If you can’t use .htaccess tweaks for security, this Firewall addon is what you need and must use with Smart Security Tools plugin. This addon includes 5 scanners:
- Detect SQL Injection
- Scanner for Request URI
- Scanner for Query String
- Detect Bad User Agents
- Trap Bad Request Scripts attempts
How the addon works

Addon loads early during the Smart Security Tools plugin initialization, and it scans request URL and it’s important elements: URI, query, script name and, if available, user agent from the request. Each scanner (if enabled) runs, and if any of them is triggered, request is stopped and 403 error is returned.

You can automatically ban each IP that triggers any of the scanners and you can setup the temporary and permanent ban conditions, and get email notification.

Addon Requirements
- WordPress 3.68 or newer
- Smart Security Tools 3.2 or newer: get it here
Changelog

Version 1.10 / 2016.03.01.
- First release
Purchase $9.00
March 7, 2016
Good Safety Instruments: reCAPTCHA Addon (Add-ons)
Purchase $5.00

This is NOT standalone plugin and it can’t be used on its own. This is an addon for Smart Security Tools plugin for WordPress, and it is also available on CodeCanyon here:

You need to purchase and install this main plugin first. Do not attempt to use this addon on its own, it will not work.

Addon Information

Smart Security Tools: reCaptcha Addon is expansion addon for Smart Security Tools plugin that adds easy way to integrate Google reCaptcha v2 (or noCaptcha as it is also known) into different parts of WordPress and popular third party WordPress plugins.

Addon can protect login, registration, comments forms and support plugins: bbPress, BuddyPress and WooCommerce. Addon works with multisite mode, and it can protect Signup form, and allow control for individual sites in the network.

Because it is addon for Smart Security Tools, it has a benefit of using events log to store failed reCAPTCHA validation along with information about each failed attempt, and you can analyze that data along with other security related events. And, you can use that to ban IP’s that are repeating failed reCAPTCH verification and further improve your website security.

reCAPTCHA style and languages changes

Addon requires Google account to register for reCAPTCH service and get the keys for your website. Also, you can choose reCAPTCHA language, theme, size and type (image or audio). Plugin adds some basic styling, so you can also set alignment for the reCAPTCHA.

WordPress Integration and Third Party Plugins

Addon integrates into following WordPress forms:
- Login
- Registration
- Lost Pasword
- New Comment
- Multisite Signup
And, it also support popular third party plugins:
- bbPress: New Topic
- bbPress: New Reply
- BuddyPress: Registration
- WooCommerce: Login
- WooCommerce: Registration
- WooCommerce: Lost Pasword
Security log and auto ban of bot IP’s

For auto ban to work, you need to have log events enabled for the reCAPTCHA integrations you activated. If you enable ban of IP, it will happen once the reCAPTCHA fails more than number of time specified in a period of time. Also, if you want, you can enable notification and receive email when IP is banned for this reason.

Use in multisite network environment

In multisite network environment you can set addon to work for the whole network, and only from Network admin panel you can set it and add reCAPTCHA keys and set everything else. Or you can allow individual sites to set it on it’s own.

If you control the whole network, you must have reCAPTCHA keys generated properly to cover all sites URL’s in the network, since the keys are URL dependent.

Other features
- Don’t show reCAPTCHA for comment form if user is logged or has approved comment
- Don’t show reCAPTCHA for bbPress topic/reply form if user is logged or has approved post
Addon Requirements
- WordPress 3.6 or newer
- Smart Security Tools 3.0 or newer: get it here
Changelog

Version 1.0 / 2015.09.20.
- First release
Purchase $5.00
September 21, 2015
Good Safety Instruments: Are living Reveal Addon (Add-ons)
Purchase $10.00

This is NOT standalone plugin and it can’t be used on its own. This is an addon for Smart Security Tools plugin for WordPress, and it is also available on CodeCanyon here:

You need to purchase and install this main plugin first. Do not attempt to use this addon on its own, it will not work.

Addon Information

Smart Security Tools: Live Monitor Addon is very useful addon for Smart Security Tools plugin for WordPress allowing you to monitor logged events live, as they happen using Live Events Monitor panel and notifications system for browsers and website.

This addon includes 3 main modules:
- LIVE Events Panel
- Browser Notifications
- Website Notifications
LIVE Events Panel: See events as they happen

This is a new panel in Smart Security Tools top level menu and it is showing the list of events as they happen with use of World Map to mark geo locations for each logged event. For each event you see all logged information and you can ban IPs from this panel.

Browser Notifications: Get quick notifications in browser

Plugin can use notifications to push notes about logged events as they happen. Browser or Desktop notifications are displayed by the browser and most modern browsers support them.

Website Notifications: Get quick notifications on website pages

Similar to browser notifications, but this time plugin is using growl like notifications directly inside the website pages.

Other Features
- Set list of IP exceptions and plugin will not display events originating from these IP’s
- Select list of events to show on Live Event panel and for both notifications methods
Addon Requirements
- WordPress 3.3 or newer
- Smart Security Tools 2.2 or newer: get it here
Changelog

Version 1.0 / 2014.09.18.
- First release
Purchase $10.00
September 18, 2014
Good Safety Instruments: Login Restrict Addon (Add-ons)
Purchase $9.00

This is NOT standalone plugin and it can’t be used on it’s own. This is an addon for Smart Security Tools plugin for WordPress, and it is also available on CodeCanyon here:

You need to purchase and install this main plugin first. Do not attempt to use this addon on its own, it will not work.

Addon Information

Smart Security Tools: Login Limit Addon is powerful addition for Smart Security Tools plugin bringing additional tools for website protection related to WordPress login form.

This addon includes 3 main modules, and you can use only what you need for your website and disable other modules:
- Login Limiter
- Login Honeypot
- Blocked Usernames
Login Limiter: Prevent brute force login attacks

This module is made to prevent brute force attacks many bots use to crack the username and password. With this module you can throttle number of wrong login attempts single IP can make in a period of time. If the login fails, it will be logged, and if number of failures reaches set number, IP will be temporarilly banned. After that, if more failed logins are detected from same IP it will be banned permanently.

Login Honeypot: Prevent logins from bots

With honeypot field plugin targets logins made by bots. Honeypot field is is invisible to normal users, but most bots will fill it and that will get them caught in the trap and get banned.

Blocked Usernames: Prevent logins using listed usernames

Most brute force attacks attempt login as ‘admin’ (most common WordPress username). So, change your username to something else and set this module to check if someone is using admin username. If same IP does that more than once, it will get banned, and you can set number of failed logins to trigger this trap.

Addon Requirements
- WordPress 3.3 or newer
- Smart Security Tools 2.0 or newer: get it here
Changelog

Version 1.0 / 2014.08.21.
- First release
Purchase $9.00
August 24, 2014