[WordPress] 外掛分享： Steel Security & Hardening – Site Audit Tools

外掛標籤

開發者團隊

原文外掛簡介

Steel Security & Hardening – Site Audit Tools focuses on practical security hygiene for WordPress administrators.
The free plugin provides:

on-demand security scans
risk summaries grouped by severity and category
checks for common WordPress hardening gaps
checks for exposed root-level artifacts such as .env, SQL dumps, phpinfo files, and backup archives
a quarantine vault for operator-reviewed file isolation
uploads PHP execution blocking on supported server environments
manual guidance when automatic server hardening is not safely supported

This plugin is positioned as an auditing and hardening tool. It helps surface risk and apply selected preventive controls, but it does not promise malware removal, incident response, or complete server protection.
Included checks
The scan currently looks for items such as:

PHP error display exposure
WP_DEBUG and debug.log exposure
XML-RPC availability
author and REST user enumeration exposure
theme/plugin file editor availability
WordPress generator meta output
comments enabled by default
uploads PHP execution hardening status
root-level sensitive files and archives

Server-aware behavior
This plugin only auto-applies server config changes where it can do so in a scoped and reversible way.

Apache and LiteSpeed: uploads PHP blocking is managed through a Steel Security-marked .htaccess block
IIS: uploads PHP blocking is managed through a Steel Security-marked web.config section
Nginx and unsupported environments: Steel Security provides manual guidance instead of claiming automatic protection

Pro companion
This plugin can work with a separate Pro companion plugin that adds features such as scheduled scans, scan history, reports, and managed server-level controls such as directory listing protection and baseline security headers. The free plugin remains usable on its own.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)le Plugins include Complianz GDPR, Disable Updates Manage...Jetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款多合一 WordPress 外掛，整合網站安全防護、自...Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & FirewallLimit Login Attempts Reloaded 是一款強大的安全外掛，旨在...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 可以讓你安心地在 WordPress 中上傳 SVG 檔案！ 它...LoginizerLoginizer 是一款 WordPress 安全防護外掛，主要用於阻擋暴力...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role Editor「User Role Editor」WordPress 外掛讓您輕鬆更改使用者角色...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Solid Security – Password, Two Factor Authentication, and Brute Force ProtectionSolid Security 是一款專為 WordPress 網站設計的安全外掛，...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP Plugin版本: 1.6.7 您可以在日文網頁和英文網頁上找到文件、常見問...