What spurred the desire to build another WordPress security plugin? What's wrong with Wordfence, iThemes Security, and all the others? I'm just trying to find out how you're differentiating, because the list of features reads like all the others.
Report
@dereksilva using wordfence on one of my clients wordpress sites also.. about to get them to upgrade to the $5mth option to give them the 2-factor login feature etc.. wondering how this stacks up also as wordfence has a long established history of support and ongoing feature updates against hacks etc
Report
There is a definite need for what you're offering! Personally I've quit using WordPress because it was simply taking too much of my time trying to keep it secure (be it updating WordPress itself or the plugins being used). I'm using the simpler Bolt (www.bolt.cm) instead - it doesn't have the power of WordPress but for a simple blogging engine it works great
Report
Hunter
@jamiequackers WordPress updates can easily be automated nowadays with some plugins even offering sandboxed updates to protect from downtime should an update break the site. But, any CMS that offers a massive amount of functionality will require a fair amount of maintenance, not just WordPress.
Personally, if all I needed was a simple blog, I'd totally go your route and use Bolt, Grav, Jekyll, Medium, etc. But WordPress can be set up simply as a blogging platform with almost no maintenance required. It's all in how the developer builds it. Someone who uses a couple dozen plugins when all they need is a simple blog may not know how to develop a proper WordPress website.
Report
@lee_peterson Totally agree. I suppose my peeve is that WordPress should implement a reasonable level of security out-of-the-box. They are quick to tout their "famous 5 minute installation" however following this, combined with a small number of popular plugins, left me with a site that was hacked in *under a week*. A quick examination of hyperlinks in messages found in my Spam box shows I'm not alone with many a spammer using hacked WordPress sites to host their content.
Security is a common issue with Wordpress. Because there are so many custom setups and plugins out there that are contributed by the community, it can be very hard to be certain that you haven't left your site open to attacks (and since people often use Wordpress to run their whole website, they stand to lose a lot if an attacker comes along!) Having backups is useful but it doesn't protect you from hacks that might take over your server or insert malware into your website. This looks like a great solution for finding vulnerabilities and making website owners aware of what they need to fix to secure their Wordpress site. Unfortunately it's not available yet but I'll be looking forward to when it launches.
Canadian Tech Podcast: Ep. 88 - Shomi A Comet
DIY Wordle