thewppeople

SECURITY

PUTTING THE SECURITY OF YOUR WORDPRESS WEBSITE FIRST

MULTIPLE LAYERS OF SECURITY

Our hosting and maintenance packages are built on secure foundations and incorporate a combination of additional security features that we think you won’t find elsewhere.

Our long experience and detailed knowledge of WordPress has taught us how to harden security and make it as difficult as possible for hackers to compromise your website.

In addition to many small tweaks to the WordPress installation, the plugin and theme set up, and file access and permissions, we utilise multiple firewalls and malware scanners to keep your WordPress websites safe:

  • 7g Firewall
  • Modsec Firewall
  • Virusdie

The 7G Firewall

7G is a strong firewall that is lightweight and super-fast. It strives for the optimal balance between security and performance, delivering significantly enhanced protection. Each iteration of nG builds upon previous versions, fortifying successful patterns, removing outdated patterns, and of course adding new patterns and rules based on current data. The result is a 7th-generation firewall that is cumulatively developed and extensively tested, based on code with a proven track record. It protects against:

  • Directory Traversal
  • HTTP Response Splitting
  • (XSS) Cross-Site Scripting
  • Cache Poisoning
  • Dual-Header Exploits
  • SQL/PHP/Code Injection
  • File Injection/Inclusion
  • Null Byte Injection
  • WordPress exploits such as revslider, timthumb, fckeditor, et al
  • Exploits such as c99shell, phpshell, remoteview, site copier, et al
  • PHP information leakage

The Modsec Firewall

Our MODSEC Firewall is a set of generic attack detection which aims to protect web applications from a wide range of attacks with a minimum of false alerts. The firewall provides protection against many common attack categories, including SQL Injection, Cross Site Scripting, Local File Inclusion and other threats including.

  • SQL Injection (SQLi)
  • Cross-Site Scripting (XSS)
  • Local File Inclusion (LFI)
  • Remote File Inclusion (RFI)
  • PHP Code Injection
  • Java Code Injection
  • HTTPoxy
  • Shellshock
  • Unix/Windows Shell Injection
  • Session Fixation
  • Scripting/Scanner/Bot Detection
  • Metadata/Error Leakages 

In addition to multiple firewalls at server level, at site level we offer Virusdie. A game changer.

Virusdie is a real time malware and virus scanner which contains data on viruses and vulnerabilities in websites and plugins.  Virusdie features an incredibly extensive database, and it has phenomenally low false positive rate (less than 0.0002%) and gives greater peace of mind than we’ve ever experienced with a website antivirus solution.  We can scan your site at any timed interval, but generally we scan daily.

No matter when scans are run, we can always be certain that Virusdie is using the latest antivirus database – a database that is automatically updated in the background.  Virusdie uses AI and other smart learning technologies not only to detect malware but to delete it.  If it detects a compromise on a website, not only will it alert us immediately, but it will also use AI to attempt to heal the site in real time.   If the site can’t be automatically healed, then it provided us with detailed instructions on how to quarantine and repair the compromised files.  As we say. A game changer.

Virusdie also provides its own firewall at site level which allows blocking of individual countries from accessing your site.  We. can block countries that are known to be the origin of bad actors and malware attacks.

Shopping Basket