[WordPress] 外掛分享： Genisoft Security Connector

內容簡介

Genisoft Security Connector 是 WP Security（由 Genisoft 提供）的官方外掛，專為 WordPress 提供遠端安全審核和惡意程式檢測服務。此外掛輕量且不進行任何分析，透過 HMAC-SHA256 認證的唯讀 REST API，讓 WP Security 引擎能夠遠端審核您的網站。

【主要功能】
• 遠端安全審核與惡意程式檢測
• HMAC-SHA256 認證確保安全性
• 唯讀 REST API 進行文件分析
• 偵測 PHP webshells 和後門
• 檢查修改的 WordPress 核心檔案
• 不儲存文件內容，僅保留分析結果

外掛標籤

開發者團隊

原文外掛簡介

Genisoft Security Connector is the official plugin for WP Security (by Genisoft) — a remote security audit and malware detection service for WordPress.
This plugin is a lightweight connector: it performs no analysis itself. It exposes a read-only REST API authenticated with HMAC-SHA256 that the WP Security engine calls to audit your site remotely, without SSH or FTP. The heavy analysis (detection of webshells, backdoors, injections, obfuscated code, WordPress core integrity checks against the official api.wordpress.org checksums, and YARA rules) runs on our servers, in an isolated environment — your site stays light and fast.
What the scanner detects:

PHP webshells and backdoors
Injectors and malicious redirects
Obfuscated / encoded code
Modified WordPress core files
Vulnerable plugins and themes (CVE)
Code injected into the database (wp_options, etc.)

Secure by design:

HMAC-SHA256 authentication on every request (signature + timestamp; requests older than 5 minutes are rejected). One unique key per site.
Read-only: files are read for analysis, never executed (no eval, exec or include on external content).
No SSH, no SFTP.

Third-party service
This plugin is a connector: it requires an account on the external WP Security service (https://wordpress.genisoft.fr) to be useful. Each time you start a scan from your WP Security dashboard, the service calls the plugin’s read-only REST API to read the files to analyze. File contents are not stored by the service — only analysis results (metadata) are kept; hosting is in the EU (GDPR).

Service website: https://wordpress.genisoft.fr
Terms of service: https://wordpress.genisoft.fr/legal/cgu
Privacy policy: https://wordpress.genisoft.fr/legal/confidentialite

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...NinjaFirewall (WP Edition) – Advanced Security Plugin and FirewallNinjaFirewall (WP Edition) 是一款先進的網頁應用防火牆，專...Jetpack ProtectJetpack Protect 是一款免費的 WordPress 安全外掛，提供每日...Defender Security – Malware Scanner, Login Security & FirewallDefender Security 是一款易於設置的企業級安全外掛，能有效...Security Plugin, Firewall & Malware Scanner with Auto Removal這款安全外掛專注於消除 WordPress 最常見的安全威脅，並提供...SecuPress with Simple SSL – Simple and Performant SecuritySecuPress 是一款專為 WordPress 設計的安全外掛，提供全面的...NinjaScanner – Virus & Malware scanNinjaScanner 是一款輕量級、快速且強大的 WordPress 病毒掃...AntiVirusAntiVirus 是一個易於使用、安全的工具，可加固您的 WordPres...Jetpack VaultPress請注意：此外掛已不再對新客戶提供支援。 對於下一代的 Vault...Security Ninja – WordPress Security & FirewallSecurity Ninja 是一款輕量級的 WordPress 安全外掛，旨在保...Compromise Scanner for wp2shellCompromise Scanner for wp2shell 是一款只讀的取證掃描器，...Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…Vigilant 是一款完全免費的 WordPress 安全套件，提供企業級...DefendWP Firewall總結：DefendWP.org 是一款 WordPress 外掛，能保護您的網站...