Cloud security controls for WordPress

premium Cloud security service works with the Security Plugin, Firewall & Malware Scanner with Auto Removal. The extension provides controls in WordPress, while the service supplies security features, detailed statistics, and extended log storage.

The service is subscription based, with renewal for one year. After the trial period, the plugin continues to provide its functions, including brute-force protection and an action log in the WordPress dashboard.

Set login and account policies

By default, a failed administrator login triggers a short delay. The plugin reviews the security audit log hourly and can block an IP address for 24 hours when it entries at least 10 login attempts during that period. Administrators can also configure the maximum failed attempts before a ban, the period used to count attempts, and the ban duration, which ranges from two minutes to 24 hours.

Other login controls include two-factor authentication for selected visitor roles, a custom login URL, hiding the default login page, and stopping user enumeration. Options can prevent password reset or password change errors from revealing whether a username exists.

Firewall, scans, and traffic review

• Set firewall rules for IP addresses, networks, or countries, and use a Web Application Firewall to control unwanted requests.
• Review traffic by users, pages, IP addresses, countries, and hit counts per page.
• Scan for malware with an automatic cure function for cases where a cure method is available. Automatic malware scans can run daily.
• Check installed add-ons and themes for known vulnerabilities.
• Receive login event notifications and weekly security reports by email.

These controls can help administrators monitor activity on business websites, membership sites, blogs, and other WordPress installations.

Keep a longer audit history

After the trial, the WordPress dashboard log view is limited to the last 20 entries in 24 hours. The subscription service stores all logs in the CleanTalk Dashboard for 45 days, where administrators can review security events and activity over time. Detailed security statistics provide a view of the available protection functions.

Install and configure

Install the Security Plugin, Firewall & Malware Scanner with Auto Removal in WordPress, then connect it to premium Cloud security service. Configure login, firewall, scanning, notification, and reporting settings in the plugin and service dashboards. Review the available policies and set them to match your site's roles and activity.