SecuPress Pro

SecuPress Pro brings website reviews and routine security tasks together with controls for accounts, files, and incoming traffic. Start with the scanner to see which areas need attention, then use scheduled checks and the relevant protections to manage security over time.

Review findings and schedule routine checks

The security scanner checks 35 points in about five minutes and returns a security grade with a report. Many recommended fixes can be selected with a checkbox. If a change needs your decision, SecuPress asks before proceeding. Export the analysis as a PDF to share with clients or colleagues.

Scheduled tasks cover three jobs: the scanner checks for issues and emails a report of actions to consider, a backup task saves the database and files for download, and a malware scan checks the site at regular intervals.

Set rules for accounts and login access

Login protections help limit repeated attempts and password spraying. You can block attempts that use usernames that do not exist, set a non-login time slot, and control visitor sessions. Account options include two-factor authentication, password lifetimes, strong-password rules, and restrictions on vague usernames such as www or admin. The included Move Login capability lets you change the WordPress login page.

Check files, components, and traffic

The malware scanner checks for bad files in FTP, dangerous files in the uploads folder, and potential phishing attempts through index.php loads. Plugin and theme checks look for vulnerable components or files tampered with to include malicious code. When a vulnerable add-on or theme is detected, the security module can send an email alert and display a warning in WordPress. Security alarms hosted on SecuPress servers provide daily data about recently vulnerable add-ons and themes.

Firewall capabilities block malicious incoming requests, bad user agents, and suspicious IPs. SecuPress can also block visits from bad bots and restrict a country by geolocation. Its security checks cover bad request methods and URL contents, as well as SQL injection scanners.

Follow activity and prepare the installation

Email alerts report important events, while a daily report summarizes attempted attacks and activity blocked by SecuPress. Security logs record important events and 404 pages, and let you manage banned IPs.

SecuPress can be activated for all subsites from the main multisite network site. It is compatible with WordPress caching and multilingual plugins, and the source lists compatibility with hosts including o2switch, OVH, SiteGround, Bluehost, PlanetHoster, WP Engine, and GoDaddy. SecuPress is not compatible with another security extension because overlapping security rules can conflict. Remove other security plugins before installing and activating SecuPress. Then open SecuPress settings, run the scanner, review its findings, and configure the protections and scheduled tasks your site needs.