BC Security

BC Security is a plugin that helps keep websites secure through automated checks, hardening, and monitoring. It is designed for site owners who want a comprehensive yet lightweight security solution without external data sharing.

• Security Checklist: Runs basic checks (PHP file execution, directory listings, username strength) and advanced checks (core/plugin integrity, Google Safe Browsing) to identify vulnerabilities or signs of compromise.
• WordPress Hardening: Disables pingbacks, XML-RPC methods, application passwords, and username discovery via REST API. Validates passwords against the Pwned Passwords database.
• Login Security: Limits login attempts per IP, blocks common usernames, and shows generic error messages to hinder brute-force attacks.
• Bad Request Banner: Automatically bans IPs that trigger many 404s (e.g., scanning for vulnerable files) using built-in or custom rules.
• Notifications: Sends email alerts for updates, admin logins, lockouts, and checklist failures. Notifications can be muted per environment.