Rationalise on security-related plugins

Resolved Russell Cohen (Mywebapps)
(@maskil)

11 years ago

Hi Paul,

I’m (finally) looking to rationalise on the security-related plugins I use, and possibly replace some or all with the WP Simple Firewall. Here’s what my “suite” looks like at the moment. Any suggestions as to how this could be rationalised?

All sites:

– Jetpack Protect (formerly BruteProtect), and

– All in One WP Security & Firewall, or
– iThemes Security (formerly Better WP Security)

Optionally (for sites under threat):

– Sucuri Security – Auditing, Malware Scanner and Security Hardening
– BBQ: Block Bad Queries
– WP Security Audit Log

Thanks/regards.

PS I did attempt to post this as a comment on your blog, but I thought it would specifically be of interest to those looking at this forum.

https://wordpress.org/plugins/wp-simple-firewall/

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Author Paul
(@paultgoodchild)

11 years ago

Hi Russell,

How do you mean exactly by “rationalised” ? Are you looking to consolidate?

It really comes down to what you find to be essentials for security.

I’m of the opinion that I’ve got way to much to worry about than daily interruptions and baby-sitting of a WordPress site, and whether it’s being attacked. I’d rather be productive and focused. So I made the plugin to handle it all for me, and provide me with an audit trail if I wanted to dig into the history and see what happened.

I see people often talk about attacks here, and scans there, and blocking china, and “omg I’m being attacked!”. Frankly, it’s all noise. What I care about is if my site is safe and protected.

It is, and I hardly need to lift a finger to deal with it. This isn’t just down to the firewall, but it’s down to:
– long, usually unpredictable usernames,
– longer passwords
– plugin and core updates/management
– web hosting isolation (https://www.icontrolwp.com/2015/04/wordpress-security-basics-series-pt3-web-hosting-isolation/)
– Cloudflare

Hope some of that helps.
Paul.

Thread Starter Russell Cohen (Mywebapps)
(@maskil)

11 years ago

Hi Paul,
Yeah, I guess what I’m asking is, if I fully implement the WP Simple Firewall on a site, can I do away with the need for any or all of these plugins, or is there still a need for other plugins to supplement or complement what the WP Simple Firewall does?
Thanks,
Russell

Plugin Author Paul
(@paultgoodchild)

11 years ago

I don’t use any other security plugin on my site.

All I can suggest is try it, and then when there’s something you want to see on the Firewall and it’s not there, let me know. I’ll tell you if I’ll implement it or not, and why or why not. Or perhaps an equivalent is already there.

If after you try it and it doesn’t have everything that you believe to be critically important for you, add back the plugin you want that has it.

But please feedback to me and let me know.

Cheers..

Thread Starter Russell Cohen (Mywebapps)
(@maskil)

11 years ago

Thanks for all the guidance!

Plugin Author Paul
(@paultgoodchild)

11 years ago

No problem, happy to help! 🙂

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Rationalise on security-related plugins’ is closed to new replies.

Tags