Security Blog
Useful information and technical details if you want to know more how to protect WordPress from modern threats effectively
Two-Factor Authentication for WordPress
Two-Factor Authentication or 2FA provides an additional layer of security requiring a second factor of identification beyond just a username and password. Two-factor authentication has long been used to control access to personal and financial data processed in banks or insurance companies; and today website owners are increasingly using [...]
How to protect WordPress effectively: a must-do list
A must-do list to get high-security and durable protection for your website. To get the most out of Cerber’s security algorithms, your should configure all the settings below. Do this thoughtfully because some settings may conflict with another plugin or your web server settings. In case of any problem, check the Activity log for [...]
Manage multiple WP Cerber instances from one dashboard
A short introduction to remote management technology which has been built into WP Cerber Security since version 8.0. How does it work The technology enables you to manage the WP Cerber plugin, monitor activity, and upgrade plugins on multiple WordPress powered websites from a main WordPress website which is called a master website. To [...]
Registered users only mode
Enabling this mode forces users to log in before viewing your WordPress powered website. By default, if a user is not logged in, the user is redirected to the default login page. After successfully logging in, the user will be redirected back to the page they tried to view. To achieve this, enable Authorized users only. When a user opens [...]
Automatic cleanup of malware and suspicious files
This powerful feature automatically deletes trojans, viruses, backdoors, and other malware and recover infected files. Cerber Security Professional scans the website on an hourly basis and removes malware immediately, providing best in class threat protection. Automatic cleanup of malware If the malware scanner detects malicious files [...]
Get WordPress protected: rename the plugins folder
Giving the plugins folder a new name is one of the most underestimated ways that makes your WordPress protection stronger. And yet it’s free and easy. Why it matters and how it works According to our studies at Cerber Lab most hacker attacks and attempts to exploit plugin vulnerabilities assume that all WordPress plugins are [...]
What Cerber Security Scanner scans and detects
Cerber Security Scanner is a sophisticated and extremely powerful tool that thoroughly scans every folder and inspects every file on a website for traces of malware, trojans, backdoors, changed and new files. The scanner verifies the integrity of WordPress, plugins and themes and prevents them from being infected with unforeseen malware. [...]
Automated recurring scans and email reporting for WordPress
It’s essential to regularly scan a WordPress powered website for malware and viruses and get scheduled reports. Cerber Security Scanner allows you to easily configure your schedule for automated recurring scanning and automatic malware removal. Once the schedule is configured, the scanner will automatically scan the website and [...]
Cerber Security Scanner Settings
Cerber Security Scanner is a sophisticated and powerful tool that inspects every file and folder on a website for traces of malware and backdoors, changed and new suspicious files. The scanner verifies the integrity of WordPress, plugins, and themes and prevents them from being infected with unforeseen malware. Let’s take a look [...]
Cerber Security Scanner for WordPress
A manual scan mode To start scanning manually, go to the Site Integrity admin page and click either the Start Quick Scan button or the Start Full Scan button. Do not close the browser window while the scan is in progress. You may just open a new browser tab to do something else on the website. Once the scan is finished you can close the [...]
Development version 6.7.3
This is a bug fix version. A small bug in the Black Access List algorithm is fixed. The bug: if you add the wildcard *.*.*.* entry (all IPv4 addresses) to the Black IP Access List, all form submissions including any login form will be denied with the request forbidden message and HTTP 403 code no matter what IP addresses the White IP [...]
Traffic Inspector in a nutshell
Traffic Inspector constantly screens all suspicious requests and blocks them before they can harm a website. This security algorithm is enabled by default and in the vast majority of cases requires no configuration. It is improved based on the knowledge we get during analyzing attempts to break-in and hacker attacks in our [...]
Cerber Security Professional
Upgrading to Cerber Security Pro not only unlocks the features below but puts you on the upgrade path for unbeatable security features that we’re excited to share in the near future. As of now, our customers get these powerful features and abilities: Cloud-based protection with Global Black List maintained by Cerber Lab. Our cloud [...]
WordPress 4.9.1 Security and Maintenance Release
WordPress 4.9.1 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately.
What’s new in WordPress 4.9
Account Security Improvements in WordPress 4.9 https://make.wordpress.org/core/2017/10/15/improvements-for-roles-and-capabilities-in-4-9/ Security Blog Manage multiple WP Cerber instances from one dashboard WordPress Security How To Restrict access to WordPress REST API Security Blog Two-Factor Authentication for WordPress Security Blog [...]