Features
What to do about Inactive WordPress Accounts
Inactive and abandoned WordPress users are a risk to our sites. Shield Security 7.4 provides options to automatically and manually suspend user accounts.
Continue Reading →
WordPress XML-RPC – why and how to block attacks
In this article we discuss what XML-RPC is for WordPress, how you can disable it, and why you might want to.
Continue Reading →
The Bot Signals That Help You Track And Block Bad Bots
In an earlier article we wrote about 1 particular technique to tempt a bot in order to know that it’s a bad bot. This approach is elaborate, but it works. Every bot has their own particular character, based on their...
Continue Reading →
Creating a Mouse Trap to Capture Bad Bots
Figuring out which traffic is legitimate and which isn’t, can be tricky. If a (ro)bot script is written well, and often they are, they appear to be just like any other normal visitor. The challenge that we’re presented with is...
Continue Reading →
Recover Your WordPress Account with Two-Factor Authentication Backup Codes
Two-Factor Authentication (2FA) is a wonderful thing as it does a great job of protecting our accounts. But it has its weaknesses. You’ll know this if you’ve ever lost your phone with your Google Authenticator codes. It can be a...
Continue Reading →
Keyless Activation – Doing Away With License Key Management
Managing WordPress sites is a lot of work, on a good day. With so many moving parts, staying on top of it all can be, frankly, a little overwhelming. To complicate matters, if you purchase WordPress Pro plugins, you’ve got...
Continue Reading →
GDPR and the Need for WordPress Password Policies
There’s no escaping the simple fact that “passwords”, as a means of verification, are here to stay. In the majority of cases, they’re the sole means of account verification. If you’ve heard it once, you’ve heard it a million times:...
Continue Reading →
Is Your WordPress Password `Pwned`?
Shield Security plugin for WordPress is bringing a user Password Policy module. This will let security administrators set minimum requirements on password length, strength and expiration.
Continue Reading →
The Plugin & Theme Guard For WordPress
Keeping your WordPress sites secure is a never-ending game of cat and mouse. 100% protection against intrusion is impossible. We can do our best to stop it, but we must be ready to deal with any intrusions once they occur....
Continue Reading →
Monitor WordPress Core Files For Hacks
Introducing the latest feature of our WordPress security plugin - a WordPress Core File Scanner with automatic file repair and recovery.
Continue Reading →