Swairish Site Security

Swairish Site Security is a WordPress plugin that helps site owners monitor and respond to security threats directly from the wp-admin interface. It addresses the need for on-site visibility into potential attacks without requiring external services.

The plugin provides a security dashboard displaying event totals, severity mix, category summaries, and recent events. An audit event log records details including IP address, method, URI, user agent, severity, category, risk score, and context. It detects suspicious HTTP requests associated with SQL injection, cross-site scripting, remote code execution, file inclusion, scanner probes, user enumeration, and upload indicators. Firewall capabilities support monitor or block modes along with manual IP and CIDR blocklist controls. Additional protections cover rate limiting and login brute-force attempts. A malware and file scanner checks for suspicious PHP code, web-shell indicators, executable uploads, risky permissions, recent executable changes, and WordPress core checksum drift. The meta description also references CAPTCHA and reports.

It is delivered as a free plugin available through the official WordPress.org directory and installed through the standard wp-admin plugin management interface. The developer is listed as Swadhin Khan Mohammad Nakib. All listed capabilities are presented as free features.