WordPress Security Plugin with Firewall & Malware Scanner

Frequently Asked Questions

• Can it remove malware automatically?

  Yes, the security plugin has bulti-in function to remove malware automatically. The malware can be removed by whole file or some lines from files, it depends on malware signature.

• Does it scan files and databases for malware?

  Yes, it does. The plugin checks all server-side executable files (such as .php, .otf, and similar file types) and scans WordPress database tables for suspicious or malicious code.

• How often does malware scanning run?

  It runs automatically at scheduled intervals: every 12 or 24 hours, or every 3, 7, 14, or 30 days. You can also run a scan manually whenever needed.

• Is automatic malware cleanup included?

  Yes, it is. The plugin can remove, quarantine, or cure infected files. Files are cured automatically, while all other actions must be confirmed by the user.

• Does it stop brute-force login attacks?

  Yes, it does. The plugin includes options to configure the number of login attempts, the time interval between attempts, and the lockout period, which can be set from 2 minutes to 24 hours.

• Can I hide or change wp-login URL?

  Yes, it can. We refer to /wp-login.php as the technical login URL. You can change it using the plugin.

• Does it support 2FA?

  Yes, it does. The 2FA policy can be applied by WordPress user roles (Administrator, Editor, Author, etc.). Two-Factor Authentication works via email notifications. The plugin can remember your browser for 30 days. This option can be enabled only for new devices.

• Can it block suspicious IPs/countries?

  Yes, it can. Yes, it can. Visitors can be blocked by IP address, IP networks, or country of origin via the Cloud Dashboard at CleanTalk.org on the Security Firewall page. All visitor activity is logged in the plugin for up to 24 hours and in the Cloud Dashboard for up to 45 days.

• How often is plugin updated?

  We update the plugin in two weeks cycle.