內容簡介
Cerrojo Security Toolkit 是一款專注於安全診斷與可逆控制的 WordPress 外掛，提供多項安全工具以加強網站防護，並能輕鬆管理安全設定。
【主要功能】
• 安全狀態診斷，連結至 WordPress 站點健康檢查
• 檔案編輯器控制，無需編輯 wp-config.php
• 登入保護，提供暫時性漸進式限制
• XML-RPC pingback 保護，移除內建 pingback 方法
• 階段性 HTTP 安全標頭政策，包含回滾控制
• 支援的外掛安裝與啟用事件的電子郵件警報
外掛標籤
開發者團隊
原文外掛簡介
Cerrojo Security Toolkit adds focused security diagnostics and reversible, opt-in controls under Tools > Cerrojo Security Toolkit.
Current tools include:
Security posture diagnostics with links to native WordPress Site Health.
A file editor control that stores a plugin preference without editing wp-config.php.
Best-effort login protection with temporary, progressive throttling.
XML-RPC pingback protection that removes native inbound pingback methods and the WordPress-filtered X-Pingback header.
Staged HTTP security header policies with baseline, optional groups, compatibility warnings, and rollback controls.
Email alerts for supported plugin installation and activation events.
Email alerts for supported administrator account lifecycle events.
URL Change Alerts for supported successful local WordPress Address and Site Address updates.
Selective REST API blocking by HTTP method and registered route template. Matching rules apply to all callers, including administrators and authenticated integrations.
Controls are designed to be reviewed, enabled, verified, and reversed individually. Coverage depends on the WordPress hooks and serving paths described in each tool. Login throttling is best-effort, email delivery depends on the site’s mail transport, and headers must be verified at every cache, proxy, CDN, and origin edge.
Cerrojo Security Toolkit is not a web application firewall or malware scanner. It does not certify a site or guarantee complete protection. Use it as one layer in a broader security and recovery plan.
Saved settings remain until you change them. Deactivation stops the plugin’s runtime behavior but preserves its settings, metrics, and temporary state. The plugin currently provides no uninstall cleanup routine.
