BitFire

Descripción

Only patented WordPress Firewall locks your php files from malware. Complete protection from bots.
Recover hacked sites. Identify plugin vulnerabilities, 100 MFA, SQLi, XSS, CSRF, LFI firewall

Website security that works. Don’t just scan for malware. Stop it from ever infecting your site.

BitFire integrates your website and server operating system to make website hacks, redirect attacks and account takeover impossible.

Don’t just scan for attacks after they happen; actively prevent them.

There are many Web Firewalls available. Only BitFire has 100% Free bot Blocking, Site Restore, Vulnerability Detection, File Locking, Redirect Protection, and a money-back guarantee for PRO customers.

BitFire brings new security capabilities to your website you won’t find anywhere else.
In addition to the standard Protection offered by similar solutions, BitFire has 4 unique features that, when activated, make your site impervious to attack.

• File Protection – Write Lock your files to prevent any attack from modifying your plugins or core files.
• Bot Protection – 99% of hacks are automated. BitFire blocks all automated requests and only allows approved search engines and tools.
• Redirect Protection – Prevent redirect attacks by enforcing only content from approved sites with dynamic Content Security Policy.
• Multi-Factor Authentication – Prevent account takeover with multi-factor authentication. Receive notification of all login attempts.

• Vulnerability Detection – Automatically check all of your plugins and themes against a database of over 3,500 known wordpress vulnerabilities.

• Up to 50x faster than the competition

• More 0-day protections than anyone
• Full guaranteed Protection in less than 2 milliseconds.

Protect yourself from 0-day threats with security processes, not just known signatures.

Privacy / Monitoring / Data Collection

1. Privacy. We take privacy very seriously. BitFire inspects all traffic going to the webserver and takes care to filter out any potentially sensitive information by replacing it with redacted. This can include information like passwords, credit card numbers, etc. The config.ini file includes a list of common sensitive field names under the “filtered_logging” section. These fields are immediately filtered and can not be included in any logging or error reporting. You can add additional fields to filter in the config file by adding a line “filtered_logging[field_name] = true” and replacing “field_name” with the name of the desired parameter to filter.

2. BitFire includes error monitoring. While we strive to make BitFire as robust as possible, sometimes unforeseen things happen. BitFire includes error handler which monitors it’s operation. In the event an error is detected only in the BitFire software; including during install, an alert can be sent to BitFire’s developer team. The development team monitors these errors in real time and includes fixes for any detected errors in each new release. This feature includes sending basic server info in the error report to help diagnose the problem. You may opt in/out on the setting page.

3. Plugin usage. You can help the development team improve the functionally by opting in to use the usage monitoring. This adds a counter to send button clicks to help the development team understand which features are used by customers and how often. Default off.

4. Updates. Four times a day BitFire will request the latest signatures from the BitFire signature API. These signatures are sent over SSL(TLS) and encrypted specifically for each client site. In addition bitFire also sends a list of installed plugins and version numbers to compare against recently posted security vulnerabilities.

5. Malware scanning. When bitfire scans your website for malware it creates signatures for every file on your site. It then compares these signatures against a database of over 20 million WordPress signatures to ensure your file integrity. To do this, BitFire will send the signature values (hashes) of every file to the bitfire malware api. In addition to this, any found differences are compared with the official WordPress code hosted at wordpress.org. When malware is detected it’s signature added to BitFire’s growing malware database for improved detection.

6. PRO / PREMIUM. The PRO version of BitFire is limited to 10,000 page views per day. If you are using the PRO version and you regularly exceed this usage, a notice will be sent to you and BitFire requesting a license upgrade. This data includes approximate daily usage per domain.