Really Simple Security delivers essential WordPress security, without sacrificing website performance and user-experience.
Features
WordPress Hardening
Harden WordPress at its core with the proper presets. WordPress hardening effectively secures your site through a combination of security checks and security through obscurity.
File Permissions Check
Restrict Admin user creation
15 other powerful hardening features
Login Protection
Keep your user accounts safe by protecting the WordPress login page. Enforce a strong password policy with Multifactor Authentication and check for compromised passwords via the Have I been PWND integration.
Two-Factor Authentication
Limit Login Attempts
Password Security
Compromised Password Check
Vulnerability Management
WordPress is very secure in it’s core. Most threats are introduced by using outdated or ill-developed plugins and themes. The vulnerability scan will warn you if your site contains a vulnerability and can force-update or quarantine affected components.
Recurring Vulnerability Scan
Email and Dashboard warnings
Plugins, Themes or WordPress core
Force-update or Quarantine measures
Firewall
Really Simple Security includes a performant Firewall that allows to block malicious or unwanted traffic based on IP address, region, User-Agents or exceeding the 404 threshold. Read more about our philosophy regarding Firewalls for WordPress.
Region Restrictions
IP or Username Blocking
404 Blocking
Visitor Protection
Protect site visitors with Security Headers. These headers act as security instructions for the visitor’s browser to prevent various possible attacks. Really Simple Security also offers a unique learning mode feature for complex headers. A few headers are:
HTTP Strict Transport Security (HSTS)
Content Security Policy
Permissions Policy
Referrer Policy
SSL Encryption
Enforcing SSL and migration to https has been the core of (formerly) Really Simple SSL. As SSL has become a standard, proper SSL configuration is of paramount importance for any website.
Enforce SSL
Proper 301 redirect to https
Automated mixed content fixing
SSL server health scan