Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
WP-Sentinel
A wordpress security system plugin which will check every HTTP request against a given set of rules to filter out malicious requests.
The facts
- Rating
- 2.6★ from 5
- Active installs
- 50+
- Price
- Free
- Last updated
- 3 Feb 2012
- Added
- Sep 2010
- Requires WP
- 2.8
- Tested up to
- WP 3.3.2
- Downloads
- 24,145
Our analysis
AI-assistedWP-Sentinel is a WordPress plugin designed to enhance the security of your blog by blocking various types of attacks. It operates by executing security checks on incoming HTTP requests before any other plugins are loaded. If an attack is detected, it alerts the user and sends a notification email to the administrator with details of the incident.
This plugin is suitable for WordPress site owners looking to improve their site's security against a range of threats, including SQL injections, cross-site scripting, and brute force login attempts. However, it does not monitor requests from logged-in administrators, requiring users to log out for testing.
Best for: WordPress site owners seeking to enhance their site's security.
What it does well
- ✓Increases blog security against various attacks
- ✓Blocks multiple types of threats including SQL injections and cross-site scripting
- ✓Sends notifications to the administrator upon detecting an attack
- ✓Collects attacker data to build an IP address blacklist
Where it falls short
- •Last updated in February 2012, may not be compatible with newer WordPress versions
- •Low rating of 2.6 out of 5 from 5 ratings
- •Does not check requests from logged-in administrators
Verdict
WP-Sentinel offers security features for WordPress users, but its outdated status and low rating may raise concerns about its effectiveness and compatibility.
From the developer
evilsocket's own description of WP-Sentinel, lightly tidied.
WP-Sentinel, is a plugin for the WordPress platform which will increase the security of your blog against attacks
from crackers, lamers, black hats, h4x0rs, etc .
The plugin will be loaded by wordpress before every other installed plugin and will execute some security checks upon incoming http requests and, when one of more
requests turn on the system alarm, they will be blocked, the sentinel then will show a warning message to the user and send a notification email to the blog
administrator with the whole attack details.
Furthermore wp-sentinel will communicate with a centralized server to collect attackers data and build a ip address blacklist.
This plugin is able to block those kind of attacks :
- Cross Site Scriptings
- HTML Injections
- Remote File Inclusions
- Remote Command Executions
- Local File Inclusions
- SQL Injections
- Integer & string overflows
- Cross Site Request Forgery
- Login bruteforcing
- Flooding
- … and so on 🙂
WP-Sentinel will NOT check requests from the user logged in as administrator, so if you want to check the installation you have to log out first.
Tagged as
purpose
Security & Malware Protection
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)