[WordPress] 外掛分享： H3SEC Guard – Security Hardening

內容簡介

H3SEC Guard 是一款為網站擁有者設計的安全強化外掛，提供實用的安全控制功能，避免使用繁重且不透明的安全套件，確保網站安全性與穩定性。

【主要功能】
• 強化控制（XML-RPC、檔案編輯器等）
• 登入保護（嘗試次數限制及臨時 IP 鎖定）
• 重要變更的活動日誌記錄
• 核心完整性掃描（使用官方 WordPress 檢查碼）
• 輕量級可疑 PHP 掃描器
• 風險面板（低、中、高、危急評分）

外掛標籤

開發者團隊

原文外掛簡介

H3SEC Guard is built for site owners who want practical security controls without enabling a heavy, opaque security suite.
Project contact: [email protected]
Main capabilities:

Hardening controls (XML-RPC, file editor, author enumeration, security headers)
Login protection (attempt limit + temporary IP lockout + optional admin whitelist)
Activity logging for critical site changes
Core integrity scan using official WordPress checksums
Lightweight suspicious PHP scanner with context-aware severity
Finding-level hashes (MD5/SHA256), full path visibility, and recommendations
Risk panel (low / medium / high / critical score)
On-screen findings tables (not only downloads) for suspicious files, core mismatches, and permissions
Response mode actions (close sessions, force password reset, maintenance, forensic export)
Default blocking for known malicious probe paths with temporary IP lockout
Conservative trusted-proxy and IPv4/IPv6 CIDR resolution, including optional Cloudflare forwarding
Monitor, balanced, and strict public POST inspection with route exclusions and bounded body size
Read-only server configuration inspection, with explicit atomic creation only for missing Apache/LiteSpeed files
Safe robots.txt inspection and explicit creation without modifying existing files
Quick/deep scan modes, bounded findings, exclusions, symlink avoidance, and checksum-unavailable reporting
Weekly mitigation report with detailed activity counters
Tracking for attempts with non-existent usernames
Paginated activity log with expandable event context
Configurable log retention with automatic daily cleanup
Local security assistant with explainable next-step guidance
Branded HTML weekly reports and security alerts
No hidden telemetry or mandatory third-party APIs

H3SEC Guard is designed as an explainable security plugin. Each control explains:

what it does,
what risk it reduces,
what it may break,
how to revert it.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款多合一 WordPress 外掛，整合網站安全防護、自...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 是一款讓您在 WordPress 中安全上傳 SVG 檔案的外掛...LoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...