SecureMoz Documentation

B) Usage - top

SecureMoz operates to protect you and your sites, with a NEW & Advanced WordPress Score Security Algorithm.
Your sites are scanned by running (27) new & innovative safety and security tests, and reports back instantly on 15 different security threat tests!

Once you click the "Run Scan" button all tests will be run. Depending on various parameters of your site this can take from ten seconds to 2-3 minutes.
Please don't reload the page until testing is done.

WATCH THE VIDEO

Security Audit

Perform security audit
Unique Security score system.
The score is determined by running 27 unique tests, out of which 10 reported security threats.

All tests contain form to solve the problem, or a tip how to fix if it is outside range of WordPress

Each Scan results include:

• Test
• Status
• Solution

Fix Scan results by:
• Waudit fix available
• WordPress fix available
• Tip available - Solution requires external access(config files)

Security Audit last performed
Rerun Security Audit as many times as you like.

Malware & Viruses Scanner

Malware & Viruses Scanner.
We use our custom Securemoz Waudit API to connect with some public and private resources and other APIs.
We check for Viruses, Malware, Blacklist, Drive-By Downloads, Malicious Downloads, Worms, Suspicious Applications, Suspicious Browser Changes, Security Risks, Heuristic Viruses, Adware, Trojans, Phishing Attacks, Spyware, Backdoors, Remote Access Software, Information Stealers, Dialers, Downloaders and Embedded Link to Malicious Site, among many others, in more than 53 different sites.

Settings

General Settings

Auto updates score on each test run.
Backup files permission.
And more…
Control PHP
• Maximum size of an uploaded file.
• Maximum page load size.
• Maximum number of simultaneously uploaded files.
• Maximum input parsing time.
• Maximum script parsing time.
• RAM allocated to WordPress.

Backup

Backup Settings

• Create file and/or Database backup
• Compress with zip or experiment formats(Sql,ZIP, Tar,Tar.gz)
• Email backups to yourself
• Scheduled backup

Database

Database Settings
The majority of reported WordPress database security attacks were performed by exploiting SQL Injection vulnerabilities.

• Change Database prefix
• Check Database debug status
• Check save queries status

Server

Server Settings
Protect WordPress directories and files from unauthorized access.
Bulk fixes important file permissions
File and directory permissions by status:

• Path
• Safe Permissions
• Current Permissions

Get Status PHP report:

• PHP Register Global
• PHP Safe Mode
• PHP URL Include
• PHP Display errors
• PHP URL Include
• PHP URL file open
• PHP Expose

User

User Settings

WordPress sites with accounts that use the common default username 'admin' have been hacked many times we can solve this by :

• Check Status: User “admin” exists or not
• Change username option

Configuration

Security Keys

A secret key makes your site harder to hack and access by adding random elements to the password.

• Get status of current security keys.
• Generate New Security Keys.

Secure Files
Make files more secure using .htaccess file, Protect file from public access on server-side.

• Secure wp-config.php file
• Secure .htaccess file
• Prevent inside directories from public browsing.
• Global Debug
• Disallow Plugin and Theme Editor
• Trash exist
• Javascipt/CSS Debug

// maximum number of seconds tests are allowed to run
php_value max_execution_time 300

Configuring maximum script execution time

In order to minimize the impact on your server SecureMoz has a limit on the maximum number of seconds it's tests can run. If you have a very slow server there may be a need to increase this limit.
If you want to increase this limit open .htaccess and /add/change line which defines it.

// maximum number of seconds tests are allowed to run
php_value max_execution_time 300