[WordPress] 外掛分享： Vardalion Security

內容簡介

Vardalion Security 是一款針對 WordPress 的安全外掛，能夠監控可疑行為、評估威脅分數並自動封鎖惡意 IP 位址，提供全面的網站安全防護。

【主要功能】
• 常見攻擊請求檢查
• 暴力破解和身份驗證保護
• 登入請求速率限制
• 威脅評分與自動封鎖
• 安全事件日誌與過濾
• 高嚴重性電子郵件警報

外掛標籤

開發者團隊

原文外掛簡介

Vardalion Security is a security plugin for WordPress that monitors suspicious behaviour, assigns threat scores and can automatically block hostile IP addresses.
The free Core plugin includes:

Request inspection for common exploit and malicious-request patterns.
Brute-force and authentication protection.
User-enumeration and REST user-endpoint protection.
Login request rate limiting.
Bot and security-scanner detection.
Threat scoring with configurable automatic IP blocking.
Repeat-offender escalation and optional permanent blocking.
Manual IP and CIDR network blocking with lockout-safety checks.
Subnet intelligence and administrator-reviewed network recommendations.
Security event logging, filtering and CSV export.
High-severity email alerts.
Emergency Mode for recovering from an enforcement configuration problem.
WordPress core-file checksum verification for protected wp-admin PHP paths.
Trusted-proxy and Cloudflare-origin handling controls.

Vardalion Security Core is permanently free. It does not expire, require a licence key, or unlock included functionality after payment.
An optional separately distributed Vardalion Security Pro companion plugin can extend Core with additional commercial functionality. Pro code, licensing and update delivery are not included in the WordPress.org Core plugin.
Privacy
Vardalion Security is a security plugin and may process information that can be personal data, including IP addresses and user-agent strings.
Core security data is stored locally in the WordPress database. Administrators control the configured log-retention period and can manually remove blocks.
Vardalion Security Core does not send security logs or visitor telemetry to Vince Web Design.
Vardalion Security also supplies suggested privacy-policy text to WordPress under Settings > Privacy > Policy Guide so site administrators can adapt the disclosure to their own site.
For core-file integrity verification, Vardalion Security periodically requests the official checksum list from WordPress.org using the site’s installed WordPress version and locale. See the external service disclosure in the FAQ above.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security FirewallMalCare 是一款專為 WordPress 網站設計的安全外掛，提供即時...NinjaFirewall (WP Edition) – Advanced Security Plugin and FirewallNinjaFirewall (WP Edition) 是一款先進的網頁應用防火牆，專...Login Lockdown & ProtectionLogin Lockdown & Protection 外掛能夠記錄失敗登入嘗試...Hide My WP Ghost – Security & FirewallHide My WP Ghost 是一款專業的 WordPress 安全外掛，提供多...Anti-Malware Security and Brute-Force FirewallAnti-Malware Security and Brute-Force Firewall 外掛旨在保...BBQ Firewall – Fast & Powerful Firewall SecurityBBQ Firewall 是一款輕量級且快速的 WordPress 防火牆外掛，...Defender Security – Malware Scanner, Login Security & FirewallDefender Security 是一款易於設置的企業級安全外掛，能有效...Patchstack – WordPress & Plugins SecurityPatchstack 是一個強大的工具，可幫助您識別所有網站的外掛、...Security Plugin, Firewall & Malware Scanner with Auto Removal這款安全外掛專為 WordPress 設計，提供全面的安全防護，包括...Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File ScanningShield Security 是一款自動化的安全外掛，能夠有效阻擋威脅...