[Larry]

I like that SlickStack is trying to discourage very heavy security plugins for sites that don’t really need it, but what is the alternative? I found WPScan.com before but I couldn’t understand how to use the free plan. And, I want to avoid Wordfence and heavy plugins.

[Jason]

WPScan sucks now because Jetpack (Automattic) acquired it and immediately turned it into a pile of crap, that’s why none of the information you find online makes sense

[Joyce]

https://wordpress.org/support/topic/jetpack-protect-is-not-an-alternative/

[Madison]

WPScan is now called Jetpack Protect and requires Jetpack.

[Martha]

why not just use Wordfence?

[Nathan]

WPScan changed to Jetpack Protect, what are your thoughts?

[Billy]

I have never understood WPScan, and how it’s different from WPSec.

[Frank]

>> not installing page builders
>>> not installing Envato premium themes
>>>>> not installing crap extensions released by shady Indian agencies

that’s 90% of WordPress security right there, imo

[Abigail]

https://github.com/10up/wpcli-vulnerability-scanner

[Amy]

quick and dirty is just compare checksums via WP-CLI to see if any suspicious files exist, not perfect but often is enough:

Howto detect malware’s with WP-CLI

[Maria]

wordfence and manual review,

[Emma]

why not just use Wordfence?

WordFence is blacklisted on SlickStack, because it hacks wp-config.php and other core files and can cause your server to crash. They also banned innocent Russian customers for leftist virtue signaling during the Ukraine war for no reason. AVOID.

[Abigail]

Wordfence CEO is probably vaxxed 7 times with Pfizer, u know it

[Author]

Posts