AIOS Premium: security controls and site monitoring

Monitoring and security controls for WordPress

AIOS Premium extends All-In-One Security (AIOS), the WordPress add-on, with malware scanning, site monitoring, and additional access controls. It is an add-on to the free add-on, which includes a firewall, login security utilities, and standard two-factor authentication. Keep the free plugin installed and active when using Premium.

What monitoring can report

Automatic scans check for malware, trojans, and spyware. AIOS Premium can also alert you if search engines blacklist the website because of malicious code. Uptime checks execute every five minutes, with an immediate alert if the site or server goes down. Response-time monitoring tracks how the site is responding, and notifications about other issues may arrive within 24 hours.

Premium customers can send queries to the team through ticketed email support. The support includes hands-on advice about malware removal.

Rules for requests and access

Country Blocking can restrict traffic to the whole site or to selected pages and posts. You can allowlist IP addresses or ranges so they remain able to access the site despite a country block.

Smart 404 Error Blocking detects repeated 404 events that may come from scripts or bots probing URLs. Set the maximum number of events and the time period in which they must occur before an IP address is blocked. You can also block an IP immediately when a 404 request contains a chosen URL string, and allowlist IP addresses to prevent a permanent block based on 404 events.

Advanced two-factor settings

Two-factor authentication is available in the free AIOS plugin. Premium adds controls for when and how it is required: you can require it for administrators or other roles after their accounts reach a specified age, and set how many days it can be skipped on trusted devices. Premium also adds a customizable authentication layout and one-time emergency codes for account recovery if a visitor loses their device.

AIOS Premium works with WordPress Multisite networks and their subsites. It can also integrate two-factor authentication with login forms for WooCommerce, Affiliates-WP, Elementor Pro, bbPress, and Theme My Login without additional coding.

Other controls in AIOS

The underlying AIOS plugin includes login attempt limits and lockouts, automatic logout after a specified period, user enumeration prevention, and manual approval of new registrations. Its file and database tools can flag file changes, restrict access to sensitive documents, and scan for insecure file permissions. The audit log records events such as add-ons or themes being added, removed, or updated. Features are marked basic, intermediate, or advanced to help administrators work through the available settings.

Install the Premium add-on

1. Purchase AIOS Premium, then download the ZIP file from the emailed link or the My Account page.
2. In WordPress administration, go to Plugins > Add New > Upload Plugin, upload the ZIP file, and install it.
3. Keep the free AIOS plugin installed and active. When prompted, enter your AIOS username and password to connect the site to its license and receive updates.